Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/corals/access-logs/ |
124.220.161.119 - - [13/Jul/2025:07:07:23 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 124.220.161.119 - - [13/Jul/2025:07:07:33 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 34.21.78.146 - - [13/Jul/2025:07:11:25 -0500] "GET /sitemap.xml HTTP/1.1" 404 17964 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 102.218.193.86 - - [13/Jul/2025:07:13:20 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2600:3000:1511:200::82 - - [13/Jul/2025:07:15:21 -0500] "GET /.well-known/acme-challenge/d3w2wGTFOSgrGl2tyuF4vPu4bvPTFIuf97Jltu7YVOk HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 124.220.161.119 - - [13/Jul/2025:07:18:09 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 2a01:4ff:f0:bd26::1 - - [13/Jul/2025:07:35:15 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 52.7.142.23 - - [13/Jul/2025:07:51:30 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2a01:238:43f7:1a00:8647:65c5:18ea:a43d - - [13/Jul/2025:08:06:34 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:48.0) Gecko/20100101 Firefox/48.0" 35.195.16.245 - - [13/Jul/2025:08:19:13 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)" 35.195.16.245 - - [13/Jul/2025:08:19:24 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)" 2600:3000:1511:200::82 - - [13/Jul/2025:08:20:21 -0500] "GET /.well-known/acme-challenge/lm5MeCj8koEv-yYp3cH3RYgu7FNbOqLAA-oPKSZBav4 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 4.227.36.63 - - [13/Jul/2025:08:22:34 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 40.113.83.83 - - [13/Jul/2025:08:30:39 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:41 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:42 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 - "-" "-" 37.221.67.65 - - [13/Jul/2025:08:30:42 -0500] "GET /admin/index.php?route=common/login HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.3; Trident/4.0)" 40.113.83.83 - - [13/Jul/2025:08:30:44 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 404 19036 "-" "-" 37.221.67.65 - - [13/Jul/2025:08:30:44 -0500] "GET /admin/?route=common/login HTTP/1.1" 404 18399 "-" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.3; Trident/4.0)" 40.113.83.83 - - [13/Jul/2025:08:30:46 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:48 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:50 -0500] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:51 -0500] "GET /css/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:54 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:56 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:58 -0500] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:30:59 -0500] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:02 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:03 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:06 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:07 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:10 -0500] "GET /wp-admin/includes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:11 -0500] "GET /wp-admin/includes/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:13 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:14 -0500] "GET /sites/default/files/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:16 -0500] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:17 -0500] "GET /wp-admin/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:20 -0500] "GET /assets/images/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:21 -0500] "GET /assets/images/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:23 -0500] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:23 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:24 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:27 -0500] "GET /wp-activate.php HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:30 -0500] "GET /cache-compat.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:32 -0500] "GET /cache-compat.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:34 -0500] "GET /admin-post.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:35 -0500] "GET /admin-post.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:38 -0500] "GET /wp-sigunq.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:39 -0500] "GET /wp-sigunq.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:42 -0500] "GET /index/function.php/img/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:43 -0500] "GET /index/function.php/img/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:45 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:46 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:47 -0500] "GET /upload/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:48 -0500] "GET /upload/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:50 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:51 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:52 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:53 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:53 -0500] "GET /ALFA_DATA/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:55 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:56 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:57 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:31:58 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:00 -0500] "GET /wp-signup.php HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:02 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:04 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:06 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:15 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:16 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:18 -0500] "GET /post.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:19 -0500] "GET /post.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:22 -0500] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:23 -0500] "GET /images/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:25 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:27 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:29 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:34 -0500] "GET /wsoyanz.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:36 -0500] "GET /wsoyanz.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:38 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:40 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:42 -0500] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:47 -0500] "GET /as/function HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:49 -0500] "GET /as/function HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:51 -0500] "GET /images/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:52 -0500] "GET /images/cloud.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:55 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:56 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:32:59 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:00 -0500] "GET /alfa-rex.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:03 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:04 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:07 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:09 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:12 -0500] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:13 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:16 -0500] "GET /wp-comments-post.php HTTP/1.1" 405 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:16 -0500] "GET /wp-cron.php HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:17 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:18 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:20 -0500] "GET /ws.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:22 -0500] "GET /ws.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:25 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:27 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:29 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:31 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:34 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:35 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:38 -0500] "GET /mah/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:39 -0500] "GET /mah/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:42 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:43 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:46 -0500] "GET /bak.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:47 -0500] "GET /bak.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:49 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:51 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:54 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:56 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:33:59 -0500] "GET /ws.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:00 -0500] "GET /ws.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:03 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:04 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:07 -0500] "GET /yanz.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:08 -0500] "GET /yanz.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:11 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:12 -0500] "GET /makeasmtp.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:16 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:17 -0500] "GET /shell.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:20 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:21 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:24 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:25 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:27 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:28 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:30 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:32 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:34 -0500] "GET /log.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:35 -0500] "GET /log.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:37 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:39 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:41 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:42 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:44 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:46 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:47 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:51 -0500] "GET /wp-content/themes/ HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:51 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:52 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:54 -0500] "GET /wp-load.php HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:55 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:56 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:57 -0500] "GET /wp-includes/sodium_compat/namespaced HTTP/1.1" 301 262 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:57 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:58 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:34:59 -0500] "GET /css.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:00 -0500] "GET /css.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:02 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:03 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:05 -0500] "GET /blog.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:06 -0500] "GET /blog.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:08 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:10 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:12 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:13 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:16 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:17 -0500] "GET /wp-includes/customize/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:19 -0500] "GET /wp-content/plugins/ HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:20 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:21 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:23 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:25 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:27 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:28 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:31 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:32 -0500] "GET /cgi-bin/about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:34 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:35 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:38 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:40 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:42 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:43 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:45 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:46 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:49 -0500] "GET /img/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:51 -0500] "GET /img/about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:53 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:54 -0500] "GET /alfanew2.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:57 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:57 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:35:59 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:01 -0500] "GET /inputs.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:03 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:05 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:07 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:09 -0500] "GET /wp-content/updates.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:11 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:13 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:15 -0500] "GET /wp-includes/js/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:16 -0500] "GET /wp-includes/js/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:18 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:19 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:20 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:21 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:22 -0500] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:23 -0500] "GET /img/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:25 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 36 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:25 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:26 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:28 -0500] "GET /plugins/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:28 -0500] "GET /plugins/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:30 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:31 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:33 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:33 -0500] "GET /plugins.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:35 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:36 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:39 -0500] "GET /wp-consar.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:40 -0500] "GET /wp-consar.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:42 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:43 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:45 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:47 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:49 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:50 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:52 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:54 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:56 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:36:58 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:00 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:01 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:05 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:06 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:09 -0500] "GET /uploads/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:11 -0500] "GET /uploads/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:13 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:14 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:15 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:17 -0500] "GET /content.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:19 -0500] "GET /content.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:21 -0500] "GET /wp-content/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:22 -0500] "GET /wp-content/about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:24 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:25 -0500] "GET /wp-admin/maint/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:28 -0500] "GET /repeater.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:29 -0500] "GET /repeater.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:32 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:33 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:36 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:37 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:39 -0500] "GET /install.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:40 -0500] "GET /install.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:42 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:44 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:46 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:47 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:49 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:50 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:53 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [13/Jul/2025:08:37:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752413875.4417369365692138671875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 40.113.83.83 - - [13/Jul/2025:08:37:54 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:57 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:37:58 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:00 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:02 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:04 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:05 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:08 -0500] "GET /wp-conflg.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:10 -0500] "GET /wp-conflg.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:12 -0500] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:14 -0500] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:16 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:18 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:20 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 36 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:20 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:22 -0500] "GET /wp-includes/images/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:24 -0500] "GET /.well-known/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:25 -0500] "GET /.well-known/about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:28 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:29 -0500] "GET /radio.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:31 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:32 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:35 -0500] "GET /ae.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:36 -0500] "GET /ae.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:38 -0500] "GET /usersfiles/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:40 -0500] "GET /usersfiles/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:42 -0500] "GET /avaa.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:44 -0500] "GET /avaa.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:46 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:47 -0500] "GET /edit.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:50 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:50 -0500] "GET /simple.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:52 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:54 -0500] "GET /wp-includes/about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:56 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:38:58 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:00 -0500] "GET /ajax-actions.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:02 -0500] "GET /ajax-actions.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:05 -0500] "GET /wp-2019.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:07 -0500] "GET /wp-2019.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:10 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:11 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:14 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:15 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:17 -0500] "GET /wp-p.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:18 -0500] "GET /wp-p.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:20 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:21 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:24 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:25 -0500] "GET /chosen.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:27 -0500] "GET /fw.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:28 -0500] "GET /fw.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:30 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:31 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:32 -0500] "GET /ebs.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:33 -0500] "GET /ebs.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:35 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:35 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:37 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:37 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:39 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:39 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:41 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:42 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:44 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:45 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:47 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:48 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:50 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:52 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:54 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:55 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:57 -0500] "GET /classsmtps.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:39:58 -0500] "GET /classsmtps.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:00 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:02 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:04 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:06 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:09 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:10 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:13 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:14 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:17 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:18 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:20 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:22 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:24 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:25 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:28 -0500] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:29 -0500] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:31 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:33 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:35 -0500] "GET /alfanew.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:36 -0500] "GET /alfanew.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:39 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:40 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:42 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:42 -0500] "GET /updates.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:44 -0500] "GET /updates.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:46 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:48 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:50 -0500] "GET /hoot.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:51 -0500] "GET /hoot.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:53 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:53 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:55 -0500] "GET /mail.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:56 -0500] "GET /mail.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:57 -0500] "GET /about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:58 -0500] "GET /about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:40:59 -0500] "GET /xmlrpc.php HTTP/1.1" 405 60 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:00 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:01 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:03 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:04 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:06 -0500] "GET /img/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:07 -0500] "GET /img/cloud.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:09 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:10 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:13 -0500] "GET /images/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:14 -0500] "GET /images/about.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:16 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:21 -0500] "GET /cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:23 -0500] "GET /cloud.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:25 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:26 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:29 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:30 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:32 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:33 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:36 -0500] "GET /plugins/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:37 -0500] "GET /plugins/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:39 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:40 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:42 -0500] "GET /dropdown.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:43 -0500] "GET /dropdown.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:45 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:46 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:49 -0500] "GET /wp-blog-header.php HTTP/1.1" 404 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:50 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:51 -0500] "GET /admin.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:53 -0500] "GET /wp-content/repeater.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:55 -0500] "GET /wp-content/repeater.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:57 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:41:58 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:00 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:01 -0500] "GET /wp-includes/Text/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:04 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:05 -0500] "GET /wp.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:08 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 36 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:08 -0500] "GET /as.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:09 -0500] "GET /as.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:12 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:13 -0500] "GET /themes.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:15 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:16 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:19 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:20 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:23 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:24 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:26 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:28 -0500] "GET /wp-admin/meta/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:30 -0500] "GET /.well-knownold/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:31 -0500] "GET /.well-knownold/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:34 -0500] "GET /about.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:35 -0500] "GET /about.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:38 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:39 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:41 -0500] "GET /css/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:42 -0500] "GET /css/cloud.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:45 -0500] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:46 -0500] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:49 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:50 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:52 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:54 -0500] "GET /.well-known/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:56 -0500] "GET /about/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:42:57 -0500] "GET /about/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:00 -0500] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:01 -0500] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:03 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:04 -0500] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:07 -0500] "GET /templates/beez3/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:08 -0500] "GET /templates/beez3/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:11 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:12 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:14 -0500] "GET /up/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:15 -0500] "GET /up/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:17 -0500] "GET /wso112233.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:18 -0500] "GET /wso112233.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:21 -0500] "GET /admin/uploads/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:22 -0500] "GET /admin/uploads/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:24 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:26 -0500] "GET /admin/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:28 -0500] "GET /doc/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:29 -0500] "GET /doc/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:31 -0500] "GET /file/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:32 -0500] "GET /file/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:34 -0500] "GET /alfanew.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:35 -0500] "GET /alfanew.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:37 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:39 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:41 -0500] "GET /wp-mail.php HTTP/1.1" 403 1060 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:42 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:43 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:45 -0500] "GET /WSOEnigma.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:46 -0500] "GET /WSOEnigma.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:48 -0500] "GET /adminfuns.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:49 -0500] "GET /adminfuns.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:51 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:52 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:53 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:54 -0500] "GET /ini.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:55 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:56 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:58 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:43:59 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:00 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:01 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:03 -0500] "GET /upfile.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:05 -0500] "GET /upfile.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:07 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:08 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:09 -0500] "GET /wp-includes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:10 -0500] "GET /wp-includes/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:11 -0500] "GET /zwso.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:12 -0500] "GET /zwso.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:14 -0500] "GET /bypass.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:15 -0500] "GET /bypass.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:17 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:18 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:20 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:21 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:22 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:23 -0500] "GET /moon.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:25 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:26 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:28 -0500] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:29 -0500] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:30 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:31 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:32 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:33 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:34 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:35 -0500] "GET /wp-admin.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:36 -0500] "GET /wp-admin.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:37 -0500] "GET /404.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:38 -0500] "GET /404.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:39 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:39 -0500] "GET /wp-includes/css/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:41 -0500] "GET /WSO.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:41 -0500] "GET /WSO.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:42 -0500] "GET /a.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:43 -0500] "GET /a.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:44 -0500] "GET /aa.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:45 -0500] "GET /aa.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:46 -0500] "GET /aaa.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:46 -0500] "GET /aaa.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:48 -0500] "GET /ab.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:49 -0500] "GET /ab.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:50 -0500] "GET /lock360.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:51 -0500] "GET /lock360.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:52 -0500] "GET /anonse/lock360.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:53 -0500] "GET /anonse/lock360.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:55 -0500] "GET /file5.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:56 -0500] "GET /file5.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:58 -0500] "GET /sitemaps.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:44:59 -0500] "GET /sitemaps.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:00 -0500] "GET /ioxi-o.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:01 -0500] "GET /ioxi-o.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:03 -0500] "GET /load.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:04 -0500] "GET /load.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:06 -0500] "GET /k.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:07 -0500] "GET /k.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:09 -0500] "GET /server.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:10 -0500] "GET /server.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:11 -0500] "GET /index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:13 -0500] "GET /private/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:14 -0500] "GET /private/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:16 -0500] "GET /file.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:16 -0500] "GET /file.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:18 -0500] "GET /man.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:19 -0500] "GET /man.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:21 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:21 -0500] "GET /autoload_classmap.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:23 -0500] "GET /flower.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:24 -0500] "GET /flower.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:26 -0500] "GET /randkeyword.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:27 -0500] "GET /randkeyword.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:29 -0500] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 36 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:29 -0500] "GET /wp-crom.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:30 -0500] "GET /wp-crom.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:32 -0500] "GET /Api/api.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:33 -0500] "GET /Api/api.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:35 -0500] "GET /FileMgrFiles/hui0uh.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:36 -0500] "GET /FileMgrFiles/hui0uh.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:38 -0500] "GET /Yanzmini.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:38 -0500] "GET /Yanzmini.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:40 -0500] "GET /aff.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:41 -0500] "GET /aff.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:43 -0500] "GET /alfa.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:44 -0500] "GET /alfa.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:46 -0500] "GET /asasx.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:47 -0500] "GET /asasx.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:48 -0500] "GET /auth.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:49 -0500] "GET /auth.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:51 -0500] "GET /backup/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:52 -0500] "GET /backup/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:53 -0500] "GET /backup/index.php HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [13/Jul/2025:08:45:56 -0500] "POST /wp-cron.php?doing_wp_cron=1752414356.1187999248504638671875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 40.113.83.83 - - [13/Jul/2025:08:45:55 -0500] "GET /backup/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:57 -0500] "GET /bk/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:45:58 -0500] "GET /bk/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:00 -0500] "GET /cache.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:01 -0500] "GET /cache.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:02 -0500] "GET /cgi-bin/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:03 -0500] "GET /cgi-bin/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:05 -0500] "GET /cgi-bin/moon.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:06 -0500] "GET /cgi-bin/moon.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:08 -0500] "GET /class-wp.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:09 -0500] "GET /class-wp.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:11 -0500] "GET /class.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:12 -0500] "GET /class.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:14 -0500] "GET /classwithtostring.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:15 -0500] "GET /classwithtostring.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:16 -0500] "GET /config.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:17 -0500] "GET /config.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:19 -0500] "GET /date.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:20 -0500] "GET /date.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:22 -0500] "GET /delpaths.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:23 -0500] "GET /delpaths.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:25 -0500] "GET /elp.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:26 -0500] "GET /elp.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:28 -0500] "GET /engine.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:28 -0500] "GET /engine.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:29 -0500] "GET /fix.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:30 -0500] "GET /fix.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:32 -0500] "GET /fonts.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:32 -0500] "GET /fonts.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:34 -0500] "GET /includes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:35 -0500] "GET /includes/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:37 -0500] "GET /index/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:38 -0500] "GET /index/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:40 -0500] "GET /info.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:41 -0500] "GET /info.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:43 -0500] "GET /item.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:44 -0500] "GET /item.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:45 -0500] "GET /link.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:47 -0500] "GET /link.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:49 -0500] "GET /man.php7 HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:50 -0500] "GET /man.php7 HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:51 -0500] "GET /manager.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:52 -0500] "GET /manager.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:54 -0500] "GET /mango.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:56 -0500] "GET /mango.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:57 -0500] "GET /memberfuns.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:46:58 -0500] "GET /memberfuns.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:00 -0500] "GET /menu-header.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:01 -0500] "GET /menu-header.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:03 -0500] "GET /network.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:05 -0500] "GET /network.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:07 -0500] "GET /networks.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:08 -0500] "GET /networks.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:10 -0500] "GET /signup.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:11 -0500] "GET /signup.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:13 -0500] "GET /simple/function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:14 -0500] "GET /simple/function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:15 -0500] "GET /small.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:16 -0500] "GET /small.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:18 -0500] "GET /solevisible.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:19 -0500] "GET /solevisible.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:20 -0500] "GET /system.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:21 -0500] "GET /system.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:23 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:24 -0500] "GET /defaults.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:25 -0500] "GET /sim.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:25 -0500] "GET /sim.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:26 -0500] "GET /wp-admin/users.php HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:35 -0500] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:36 -0500] "GET /wp-content/uploads/cong.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:37 -0500] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:39 -0500] "GET /wp-content/themes/pridmag/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:40 -0500] "GET /wp-setting.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:41 -0500] "GET /wp-setting.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:43 -0500] "GET /wp-content/themes/alera/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:45 -0500] "GET /wp-content/themes/alera/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:46 -0500] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:47 -0500] "GET /wp-content/plugins/elementor/assets/images/app/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:49 -0500] "GET /wp-comments-pos.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:50 -0500] "GET /wp-comments-pos.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:51 -0500] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:53 -0500] "GET /wp-content/themes/ripro/inc/admin/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:54 -0500] "GET /wp-includes/l10n/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:55 -0500] "GET /wp-includes/l10n/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:57 -0500] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:47:58 -0500] "GET /index/b/home/h213348220/fundlead.ru/docs/wp-admin/includes/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:00 -0500] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:02 -0500] "GET /wp-includes/blocks/archives/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:04 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:05 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:07 -0500] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:08 -0500] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:10 -0500] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:11 -0500] "GET /wp-content/plugins/woocommerce/assets/client/blocks/products-by-attribute/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:13 -0500] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:14 -0500] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:16 -0500] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:17 -0500] "GET /wp-content/themes/seotheme/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:19 -0500] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:20 -0500] "GET /Content/UserFiles/News/Orjinal/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:21 -0500] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:22 -0500] "GET /wp-content/themes/sketch/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:24 -0500] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:25 -0500] "GET /wp-includes/images/wlw/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:27 -0500] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:28 -0500] "GET /templates/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:29 -0500] "GET /wp-content/plugins/elementor/assets//ioxi-o.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:30 -0500] "GET /wp-content/plugins/elementor/assets/ioxi-o.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:31 -0500] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:32 -0500] "GET /wp-link.php/wp-content/plugins/wp-content/uploads/wp_live_chat/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:33 -0500] "GET /wp-cro.php/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:34 -0500] "GET /wp-cro.php/ HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:36 -0500] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:36 -0500] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:38 -0500] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:39 -0500] "GET /wordpress/wp-includes/js/mediaelement/renderers/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:41 -0500] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:41 -0500] "GET /wp-content/plugins/oxygen/component-framework/components/classes/gallery/photoswipe/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:43 -0500] "GET /map.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:44 -0500] "GET /map.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:46 -0500] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:47 -0500] "GET /wp-includes/block-patterns/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:48 -0500] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:49 -0500] "GET /wp-content/plugins/elementor-pro/modules/woocommerce/skins/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:51 -0500] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:52 -0500] "GET /wp-content/plugins/seo-by-rank-math/vendor/woocommerce/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:54 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:56 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:57 -0500] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:48:58 -0500] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/blocks-config/uagb-controls/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:00 -0500] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:02 -0500] "GET /wp-content/themes/twenty/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:04 -0500] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:05 -0500] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:07 -0500] "GET /newlms/assets/frontend/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:08 -0500] "GET /newlms/assets/frontend/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:10 -0500] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:11 -0500] "GET /wp-includes/theme-compat/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:12 -0500] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:13 -0500] "GET /wp-content/plugins/shell/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:15 -0500] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:16 -0500] "GET /wp-content/themes/blocksy/static/sass/frontend/6-layout/entries/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:17 -0500] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:18 -0500] "GET /wp-includes/Requests/abou.php/ HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:20 -0500] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:20 -0500] "GET /wp/wp-content/themes/twentytwenty/template-parts/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:22 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:22 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:24 -0500] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:25 -0500] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:26 -0500] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:27 -0500] "GET /wp-content/plugins/wordpress-seo/vendor_prefixed/symfony/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:28 -0500] "GET /admin/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:28 -0500] "GET /admin/ HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:31 -0500] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:31 -0500] "GET /.well-known/acme-challenge/action=./ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:33 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:33 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:35 -0500] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:35 -0500] "GET /vendor/symfony/serializer/Mapping/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:37 -0500] "GET /wp-content/themes/blocksy/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:38 -0500] "GET /wp-content/themes/blocksy/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:39 -0500] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:40 -0500] "GET /wp-includes/sodium_compat/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:42 -0500] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:42 -0500] "GET /assets/admin/plugins/ckeditor/plugins/scayt/dialogs/dialogs/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:44 -0500] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:45 -0500] "GET /wp-includes/interactivity-api/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:47 -0500] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:48 -0500] "GET /wp-includes/js/tinymce/plugins/image/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:50 -0500] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:50 -0500] "GET /wp-includes/Requests/Response/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:52 -0500] "GET /files/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:53 -0500] "GET /files/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:55 -0500] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:56 -0500] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:57 -0500] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:49:58 -0500] "GET /wp-content/uploads/2023/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:00 -0500] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:01 -0500] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:03 -0500] "GET /wp-content/fonts//wp-content/fonts/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:04 -0500] "GET /wp-content/fonts/wp-content/fonts/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:06 -0500] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:07 -0500] "GET /images/icons/rouyg/hppd/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:09 -0500] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:10 -0500] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:12 -0500] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:13 -0500] "GET /wp-content/plugins/insert-headers-and-footers/includes/auto-insert/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:14 -0500] "GET /wp-content/upgrade/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:15 -0500] "GET /wp-content/upgrade/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:17 -0500] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:17 -0500] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:19 -0500] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:20 -0500] "GET /wp-includesmaps/p/snippets/g8ofh3h3db/raw/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:21 -0500] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:22 -0500] "GET /wp-content/plugins/file-manager-advanced/application/library/codemirror/mode/jsx/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:23 -0500] "GET /templates/ja_purity/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:23 -0500] "GET /templates/ja_purity/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:25 -0500] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:25 -0500] "GET /wp-admin/css/colors/light/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:26 -0500] "GET /wp-includes//ioxi-o.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:27 -0500] "GET /wp-includes/ioxi-o.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:28 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:29 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:30 -0500] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:30 -0500] "GET /wp-content/plugins/generateblocks/src/components/unit-picker/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:32 -0500] "GET /wp-includesmaps/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:32 -0500] "GET /wp-includesmaps/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:33 -0500] "GET /wp-include.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:34 -0500] "GET /wp-include.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:35 -0500] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:36 -0500] "GET /sos/NewTheme/images/VillagesPictures/Dhodial/Dhodial/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:37 -0500] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:38 -0500] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:39 -0500] "GET /wp-includes/block-supports/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:39 -0500] "GET /wp-includes/block-supports/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:41 -0500] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:41 -0500] "GET /wp-content/plugins/bdthemes-element-pack/modules/review-card/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:42 -0500] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:43 -0500] "GET /wp-content/plugins/w3-total-cache/lib/Aws/Aws/Api/Parser/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:45 -0500] "GET /assets/css/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:46 -0500] "GET /assets/css/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:47 -0500] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:48 -0500] "GET /wp-content/themes/twentytwentyfive/styles/sections/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:50 -0500] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:51 -0500] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:52 -0500] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:53 -0500] "GET /wp-includes/blocks/file/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:55 -0500] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:55 -0500] "GET /wp-content/themes/astra/inc/modules/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:57 -0500] "GET /wp-mai.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:57 -0500] "GET /wp-mai.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:50:59 -0500] "GET /wp-taglin.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:00 -0500] "GET /wp-taglin.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:01 -0500] "GET /wp-editor.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:02 -0500] "GET /wp-editor.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:04 -0500] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:06 -0500] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:07 -0500] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:08 -0500] "GET /wp-includes/js/tinymce/plugins/wpeditimage/wpeditimage/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:09 -0500] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets//ioxi-o.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:10 -0500] "GET /wp-content/plugins/wp-table-builder/inc/core/freemius/assets/ioxi-o.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:12 -0500] "GET /wp-activat.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:12 -0500] "GET /wp-activat.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:14 -0500] "GET /wp-includes/blocks/embed/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:15 -0500] "GET /wp-includes/blocks/embed/ HTTP/1.1" 404 18427 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:16 -0500] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:17 -0500] "GET /wp-content/plugins/revslider/public/assets/js/libs/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:19 -0500] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:20 -0500] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:21 -0500] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:21 -0500] "GET /wp-content/plugins/pro-elements/modules/notes/database/query/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:22 -0500] "GET /wp-content/languages/themes//wp-content/languages/themes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:23 -0500] "GET /wp-content/languages/themes/wp-content/languages/themes/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:24 -0500] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:25 -0500] "GET /wp-content/plugins/elementor/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:26 -0500] "GET /templates/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:27 -0500] "GET /templates/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:28 -0500] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:28 -0500] "GET /wp-content/plugins/js_composer/include/params/options/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:29 -0500] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:30 -0500] "GET /wp-content/plugins/woocommerce/packages/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:31 -0500] "GET /backup/wp-content/themes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:32 -0500] "GET /backup/wp-content/themes/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:33 -0500] "GET /images/headers/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:34 -0500] "GET /images/headers/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:35 -0500] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:35 -0500] "GET /wp-content/themes/twentytwentythree/parts/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:37 -0500] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:37 -0500] "GET /wp-includes/css/dist/block-library/action/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:39 -0500] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:40 -0500] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:41 -0500] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:42 -0500] "GET /wp-content/plugins/not/includes/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:44 -0500] "GET /wp-admin/plugins/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:45 -0500] "GET /wp-admin/plugins/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:46 -0500] "GET /about/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:47 -0500] "GET /about/ HTTP/1.1" 200 39497 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:48 -0500] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:49 -0500] "GET /wp-includes/js/tinymce/plugins/hr/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:50 -0500] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:51 -0500] "GET /wordpress/wp-includes/sodium_compat/src/Core32/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:53 -0500] "GET /wp-content/td/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:54 -0500] "GET /wp-content/td/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:56 -0500] "GET /about/b/home/iune/www/about/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:57 -0500] "GET /about/b/home/iune/www/about/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:58 -0500] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:51:59 -0500] "GET /wp-content/plugins/revslider/admin/assets/images/navigationeditor/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:01 -0500] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:02 -0500] "GET /classwithtostrin.php/rbzccnn.php/ HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:04 -0500] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:05 -0500] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:07 -0500] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:08 -0500] "GET /wp-content/plugins/wpforms-lite/templates/admin/empty-states/payments/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:09 -0500] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:10 -0500] "GET /wp-includes/js/tinymce/plugins/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:12 -0500] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:13 -0500] "GET /wp-includes/blocks/comment-template/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:15 -0500] "GET /wp-includes/css/dist/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:16 -0500] "GET /wp-includes/css/dist/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:17 -0500] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:18 -0500] "GET /wp-content/themes/twentytwentytwo/styles/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:20 -0500] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:21 -0500] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:22 -0500] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:23 -0500] "GET /wp-content/themes/listdo/inc/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:24 -0500] "GET /http:/gracecommunications.church/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:25 -0500] "GET /http:/gracecommunications.church/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:26 -0500] "GET /wp-includes/style-engine/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:26 -0500] "GET /wp-includes/style-engine/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:27 -0500] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:28 -0500] "GET /wp-content/plugins/wp-rocket/inc/admin/ui/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:30 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:30 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:32 -0500] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:33 -0500] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:34 -0500] "GET /wp-content/x/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:35 -0500] "GET /wp-content/x/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:36 -0500] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:38 -0500] "GET /wp-includes/blocks/block/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:39 -0500] "GET /wp-admin/js/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:40 -0500] "GET /wp-admin/js/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:42 -0500] "GET /wp-admin/sr/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:43 -0500] "GET /wp-admin/sr/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:44 -0500] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:45 -0500] "GET /wp-includes/Text/Diff/Engine/require/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:47 -0500] "GET /.well-known/pki-validation/wp-admin/ HTTP/1.1" 404 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:47 -0500] "GET /index/sr HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:49 -0500] "GET /index/sr HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:50 -0500] "GET /wp-content/updraft/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:51 -0500] "GET /wp-content/updraft/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:53 -0500] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [13/Jul/2025:08:52:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752414775.5884399414062500000000 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 40.113.83.83 - - [13/Jul/2025:08:52:54 -0500] "GET /wp-content/plugins/Duplicatepost/src/ui/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:56 -0500] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:57 -0500] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:58 -0500] "GET /wp-content/uploads//wp-content/uploads/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:52:59 -0500] "GET /wp-content/uploads/wp-content/uploads/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:01 -0500] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:02 -0500] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:04 -0500] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:05 -0500] "GET /wp-content/plugins/smartmag-core/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:07 -0500] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:08 -0500] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:10 -0500] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:11 -0500] "GET /wp-content/plugins/jetpack/_inc/build/shortcodes/js/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:12 -0500] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:13 -0500] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:15 -0500] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:16 -0500] "GET /wp-includes/css/dist/components/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:17 -0500] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:18 -0500] "GET /wp-includes/js/tinymce/plugins/wpview/wp/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:20 -0500] "GET /wp-content/fonts/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:20 -0500] "GET /wp-content/fonts/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:22 -0500] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:23 -0500] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:24 -0500] "GET /wp-content/languages/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:25 -0500] "GET /wp-content/languages/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:27 -0500] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:28 -0500] "GET /wp-includes/blocks/group/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:29 -0500] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:30 -0500] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:31 -0500] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:32 -0500] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:34 -0500] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:35 -0500] "GET /sec/core/tests/Drupal/FunctionalTests/Hal/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:37 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:38 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:39 -0500] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:40 -0500] "GET /wp-content/plugins/jet-engine/includes/components/glossaries/assets/css/admin/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:42 -0500] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:43 -0500] "GET /wp-content/plugins/all-in-one-seo-pack/vendor_prefixed/psr/log/Psr/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:45 -0500] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:46 -0500] "GET /wp-content/plugins/elementor/core/admin/ui/components/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:47 -0500] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:48 -0500] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:50 -0500] "GET /wp-content/languages/themes/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:51 -0500] "GET /wp-content/languages/themes/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:53 -0500] "GET /.well-known HTTP/1.1" 301 237 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:53 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [13/Jul/2025:08:53:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752414835.8956210613250732421875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 40.113.83.83 - - [13/Jul/2025:08:53:54 -0500] "GET /.well-known/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:57 -0500] "GET /.well-known/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:58 -0500] "GET /.well-known/autoload_classmap.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:53:59 -0500] "GET /.well-known/config HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:00 -0500] "GET /.well-known/config HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:01 -0500] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 36 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:01 -0500] "GET /.well-known/pki-validation/top.php HTTP/1.1" 404 36 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:01 -0500] "GET /NewFile.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:02 -0500] "GET /NewFile.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:03 -0500] "GET /Public/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:04 -0500] "GET /Public/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:05 -0500] "GET /admin/editor/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:06 -0500] "GET /admin/editor/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:07 -0500] "GET /api.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:08 -0500] "GET /api.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:10 -0500] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:10 -0500] "GET /app/wp-content/plugins/fix/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:12 -0500] "GET /blog/blog.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:12 -0500] "GET /blog/blog.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:14 -0500] "GET /c.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:15 -0500] "GET /c.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:16 -0500] "GET /c99.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:17 -0500] "GET /c99.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:18 -0500] "GET /comfunctions.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:19 -0500] "GET /comfunctions.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:20 -0500] "GET /contact.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:21 -0500] "GET /contact.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:23 -0500] "GET /credits.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:23 -0500] "GET /credits.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:24 -0500] "GET /css/colors/coffee/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:26 -0500] "GET /css/colors/coffee/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:27 -0500] "GET /css/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:28 -0500] "GET /css/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:29 -0500] "GET /default.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:29 -0500] "GET /default.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:30 -0500] "GET /error.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:31 -0500] "GET /error.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:32 -0500] "GET /f.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:33 -0500] "GET /f.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:34 -0500] "GET /favicon.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:35 -0500] "GET /favicon.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:36 -0500] "GET /footer.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:37 -0500] "GET /footer.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:38 -0500] "GET /function.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:38 -0500] "GET /function.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:39 -0500] "GET /gel4y.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:40 -0500] "GET /gel4y.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:41 -0500] "GET /header.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:42 -0500] "GET /header.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:43 -0500] "GET /hehe.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:44 -0500] "GET /hehe.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:45 -0500] "GET /home.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:46 -0500] "GET /home.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:47 -0500] "GET /jquery.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:47 -0500] "GET /jquery.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:49 -0500] "GET /libraries/php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:50 -0500] "GET /login HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:51 -0500] "GET /login HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:52 -0500] "GET /lufix.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:53 -0500] "GET /lufix.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:54 -0500] "GET /mah.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:55 -0500] "GET /mah.php HTTP/1.1" 404 18399 "-" "-" 209.145.62.177 - - [13/Jul/2025:08:54:56 -0500] "POST /wp-cron.php?doing_wp_cron=1752414896.7716360092163085937500 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 40.113.83.83 - - [13/Jul/2025:08:54:56 -0500] "GET /maintenance.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:57 -0500] "GET /maintenance.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:58 -0500] "GET /news.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:54:58 -0500] "GET /news.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:00 -0500] "GET /nf_tracking.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:01 -0500] "GET /nf_tracking.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:03 -0500] "GET /ova-tools.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:04 -0500] "GET /ova-tools.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:06 -0500] "GET /pi.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:08 -0500] "GET /pi.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:10 -0500] "GET /plugins/custom/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:11 -0500] "GET /plugins/custom/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:13 -0500] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:14 -0500] "GET /post.php/wp-includes/Requests/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:15 -0500] "GET /shellv3.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:16 -0500] "GET /shellv3.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:18 -0500] "GET /sx.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:19 -0500] "GET /sx.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:21 -0500] "GET /system_log.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:22 -0500] "GET /system_log.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:23 -0500] "GET /test.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:24 -0500] "GET /test.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:26 -0500] "GET /text.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:27 -0500] "GET /text.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:28 -0500] "GET /upload.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:29 -0500] "GET /upload.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:31 -0500] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:32 -0500] "GET /vendor/bin/loader.php/wp-admin/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:34 -0500] "GET /worksec.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:35 -0500] "GET /worksec.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:37 -0500] "GET /wp-admin HTTP/1.1" 301 234 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:37 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:40 -0500] "GET /wp-admin/admin.php HTTP/1.1" 302 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:44 -0500] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:45 -0500] "GET /wp-admin/css/about.php/alfacgiapi/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:47 -0500] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:48 -0500] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:49 -0500] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:50 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:51 -0500] "GET /wp-admin/images/admin.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:52 -0500] "GET /wp-admin/images/admin.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:55 -0500] "GET /wp-admin/images/atomlib.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:55 -0500] "GET /wp-admin/images/atomlib.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:57 -0500] "GET /wp-admin/images/install.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:55:58 -0500] "GET /wp-admin/images/install.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:00 -0500] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:01 -0500] "GET /wp-admin/images/wp-login.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:03 -0500] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:03 -0500] "GET /wp-admin/images/wp-settings.phtml HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:06 -0500] "GET /wp-admin/install.php HTTP/1.1" 403 6628 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:06 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:08 -0500] "GET /wp-admin/js/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:09 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:10 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:12 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 409 1144 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:12 -0500] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:13 -0500] "GET /wp-admin/user/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:15 -0500] "GET /wp-admin/x.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:16 -0500] "GET /wp-admin/x.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:17 -0500] "GET /wp-atom.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:20 -0500] "GET /wp-blog.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:21 -0500] "GET /wp-blog.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:22 -0500] "GET /wp-cli.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:23 -0500] "GET /wp-cli.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:25 -0500] "GET /wp-configs.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:26 -0500] "GET /wp-configs.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:28 -0500] "GET /wp-content/atomlib.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:29 -0500] "GET /wp-content/atomlib.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:31 -0500] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:32 -0500] "GET /wp-content/languages/wp-login.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:33 -0500] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:34 -0500] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:36 -0500] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:37 -0500] "GET /wp-content/plugins/WordPressCore/fm.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:39 -0500] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:39 -0500] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:41 -0500] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:42 -0500] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:43 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:44 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:46 -0500] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:46 -0500] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:48 -0500] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:49 -0500] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 404 18401 "-" "-" 209.145.62.177 - - [13/Jul/2025:08:56:51 -0500] "POST /wp-cron.php?doing_wp_cron=1752415011.3165080547332763671875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 40.113.83.83 - - [13/Jul/2025:08:56:50 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:51 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:52 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:53 -0500] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:53 -0500] "GET /wp-content/themes/pridmag/1.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:54 -0500] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:55 -0500] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:57 -0500] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:58 -0500] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:56:59 -0500] "GET /wp-content/uploads HTTP/1.1" 301 244 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:00 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:00 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:02 -0500] "GET /wp-content/x/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:02 -0500] "GET /wp-content/x/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:04 -0500] "GET /wp-file.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:05 -0500] "GET /wp-file.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:07 -0500] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:08 -0500] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:10 -0500] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:11 -0500] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:12 -0500] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:13 -0500] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:14 -0500] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:15 -0500] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:16 -0500] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:17 -0500] "GET /wp-includes/Text/chosen.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:19 -0500] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:20 -0500] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:21 -0500] "GET /wp-includes/blocks/more/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:22 -0500] "GET /wp-includes/blocks/more/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:23 -0500] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:24 -0500] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:26 -0500] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:26 -0500] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:28 -0500] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:29 -0500] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:30 -0500] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:31 -0500] "GET /wp-includes/blocks/term-description/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:32 -0500] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:33 -0500] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:34 -0500] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:35 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 404 19034 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:36 -0500] "GET /wp-includes/install.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:37 -0500] "GET /wp-includes/install.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:38 -0500] "GET /wp-includes/sts.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:39 -0500] "GET /wp-includes/sts.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:40 -0500] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:40 -0500] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 404 19036 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:41 -0500] "GET /wp-info.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:42 -0500] "GET /wp-info.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:43 -0500] "GET /x.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:44 -0500] "GET /x.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:45 -0500] "GET /xleet.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:46 -0500] "GET /xleet.php HTTP/1.1" 404 18399 "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:47 -0500] "GET /xox.php HTTP/1.1" 301 - "-" "-" 40.113.83.83 - - [13/Jul/2025:08:57:47 -0500] "GET /xox.php HTTP/1.1" 404 18399 "-" "-" 51.222.253.10 - - [13/Jul/2025:09:00:11 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 3.226.244.120 - - [13/Jul/2025:09:06:47 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 156.146.36.87 - - [13/Jul/2025:09:20:45 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 2600:3000:1511:200::82 - - [13/Jul/2025:09:25:22 -0500] "GET /.well-known/acme-challenge/98cm18Y1lP7f4BxGVPx_2s28K9XcDzPi7jh2mYOPc68 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 42.118.1.244 - - [13/Jul/2025:09:33:36 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.51.252.146 - - [13/Jul/2025:09:35:55 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.129 - - [13/Jul/2025:09:46:38 -0500] "GET / HTTP/1.1" 301 - "-" "-" 2a02:c206:3015:2326::1 - - [13/Jul/2025:09:52:46 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 4.227.36.63 - - [13/Jul/2025:09:59:11 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 103.110.86.217 - - [13/Jul/2025:10:07:00 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2600:3000:2710:200::84 - - [13/Jul/2025:10:30:22 -0500] "GET /.well-known/acme-challenge/b-m2QLJEq-3-nMFlCvwDFEhLMMw6rB6gux_NWwzfUe0 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 185.177.72.104 - - [13/Jul/2025:10:39:32 -0500] "GET /.git/HEAD HTTP/1.1" 404 19034 "-" "-" 185.177.72.104 - - [13/Jul/2025:10:39:33 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.171.207.43 - - [13/Jul/2025:11:12:52 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 4.227.36.42 - - [13/Jul/2025:11:14:38 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 116.193.190.94 - - [13/Jul/2025:11:16:32 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 2600:3000:1511:200::82 - - [13/Jul/2025:11:35:24 -0500] "GET /.well-known/acme-challenge/JTPfWv87L6AYI0mx5b2zpTwiOj6hZkiodgb45lOYasE HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 34.134.92.178 - - [13/Jul/2025:12:04:51 -0500] "GET /media/system/js/core.js HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 34.134.92.178 - - [13/Jul/2025:12:04:55 -0500] "GET /media/system/js/core.js HTTP/1.1" 404 19036 "http://corals.io/media/system/js/core.js" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 66.249.73.98 - - [13/Jul/2025:12:09:08 -0500] "GET /ads.txt HTTP/1.1" 404 19034 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.74.169 - - [13/Jul/2025:12:09:09 -0500] "GET /ads.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.156.156.96 - - [13/Jul/2025:12:14:04 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.132.157.161 - - [13/Jul/2025:12:29:05 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2600:3000:1511:200::82 - - [13/Jul/2025:12:40:20 -0500] "GET /.well-known/acme-challenge/Hr_xze3nrMMUzRCX6kTZJrdnpaj9NxwErXHgvUvIguw HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 198.235.24.2 - - [13/Jul/2025:12:44:44 -0500] "GET / HTTP/1.1" 301 - "-" "-" 35.196.67.206 - - [13/Jul/2025:12:48:23 -0500] "HEAD /wordpress HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:25 -0500] "HEAD / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:25 -0500] "HEAD /wp HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:26 -0500] "HEAD /bc HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:27 -0500] "HEAD /bk HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:27 -0500] "HEAD /backup HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:28 -0500] "HEAD /old HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:29 -0500] "HEAD /new HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:30 -0500] "HEAD /main HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.196.67.206 - - [13/Jul/2025:12:48:31 -0500] "HEAD /home HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 4.227.36.46 - - [13/Jul/2025:12:53:37 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 138.199.213.207 - - [13/Jul/2025:13:01:56 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 146.70.192.164 - - [13/Jul/2025:13:30:07 -0500] "GET /wp-admin/network/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:08 -0500] "GET /natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:09 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:10 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:30:12 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:13 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:14 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:14 -0500] "GET /wp-includes/bk/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:30:15 -0500] "GET /file2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:16 -0500] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:17 -0500] "GET /file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:18 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:19 -0500] "GET /item.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:20 -0500] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:20 -0500] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:21 -0500] "GET /zwso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:22 -0500] "GET /wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.164 - - [13/Jul/2025:13:30:23 -0500] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.164 - - [13/Jul/2025:13:30:24 -0500] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.164 - - [13/Jul/2025:13:30:25 -0500] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:30:25 -0500] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:26 -0500] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:26 -0500] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:30:27 -0500] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:28 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:28 -0500] "GET /templates/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.164 - - [13/Jul/2025:13:30:29 -0500] "GET /cong.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.164 - - [13/Jul/2025:13:30:30 -0500] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:30 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:30:31 -0500] "GET /dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:30:31 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:30:32 -0500] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:33 -0500] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:33 -0500] "GET /repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:34 -0500] "GET /wp-2019.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:34 -0500] "GET /atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:35 -0500] "GET /css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.164 - - [13/Jul/2025:13:30:36 -0500] "GET /log.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.164 - - [13/Jul/2025:13:30:37 -0500] "GET /index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:37 -0500] "GET /mail.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:30:38 -0500] "GET /lufix.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:39 -0500] "GET /doc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:40 -0500] "GET /bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:40 -0500] "GET /content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:41 -0500] "GET /upfile.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:30:42 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:43 -0500] "GET /bypass.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:30:44 -0500] "GET /wp-activate.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:30:45 -0500] "GET /updates.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:45 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.164 - - [13/Jul/2025:13:30:46 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:30:47 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.164 - - [13/Jul/2025:13:30:48 -0500] "GET /ae.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:30:49 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:30:50 -0500] "GET /blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:30:51 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:30:52 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:52 -0500] "GET /as.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:53 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:30:54 -0500] "GET /ws.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.192.164 - - [13/Jul/2025:13:30:54 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:55 -0500] "GET /wp-sigunq.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:30:56 -0500] "GET /wso112233.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:57 -0500] "GET /wp-atom.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.164 - - [13/Jul/2025:13:30:57 -0500] "GET /alfanew.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:58 -0500] "GET /fw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:58 -0500] "GET /install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:30:59 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:00 -0500] "GET /wp-admin/shapes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:01 -0500] "GET /XxX.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:01 -0500] "GET /Marvins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:02 -0500] "GET /wp-includes/css/modules.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:31:03 -0500] "GET /olux.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:04 -0500] "GET /wso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:05 -0500] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:31:06 -0500] "GET /uploader.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:07 -0500] "GET /1337.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:08 -0500] "GET /user.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:31:09 -0500] "GET /wp-info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:10 -0500] "GET /wxo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:11 -0500] "GET /amigo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:11 -0500] "GET /yoi.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:12 -0500] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:12 -0500] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:31:13 -0500] "GET /wp-contentt.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:31:13 -0500] "GET /we1y8.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:14 -0500] "GET /wp-content/iu.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:15 -0500] "GET /ccx/th3_err0r.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:31:15 -0500] "GET /ccx/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:16 -0500] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:17 -0500] "GET /hehe.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:17 -0500] "GET /post-data.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:31:18 -0500] "GET /w0.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:19 -0500] "GET /old-index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:20 -0500] "GET /wsanon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:21 -0500] "GET /wp-content/small.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:31:21 -0500] "GET /wp-content/mode.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.164 - - [13/Jul/2025:13:31:22 -0500] "GET /indo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:31:23 -0500] "GET /beence.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:24 -0500] "GET /indosec.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:24 -0500] "GET /archives.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:25 -0500] "GET /po8sa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:26 -0500] "GET /thesmartestx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:31:27 -0500] "GET /zcanp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:28 -0500] "GET /burjuva.aspx HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:28 -0500] "GET /pvt.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:29 -0500] "GET /shell20211028.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:31:30 -0500] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:31:31 -0500] "GET /crypted.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:32 -0500] "GET /h0110w4y.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:31:32 -0500] "GET /vesiw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:33 -0500] "GET /w.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.164 - - [13/Jul/2025:13:31:34 -0500] "GET /wp-db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:31:35 -0500] "GET /wp-includes/lx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:36 -0500] "GET /wp-content/ice.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:37 -0500] "GET /wp-content/lx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.164 - - [13/Jul/2025:13:31:37 -0500] "GET /lx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:38 -0500] "GET /tonant.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:39 -0500] "GET /f0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:39 -0500] "GET /config.bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:40 -0500] "GET /bypass403.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:41 -0500] "GET /adminer.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:42 -0500] "GET /allahnaber.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:43 -0500] "GET /AK-74.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:43 -0500] "GET /alfa3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:31:44 -0500] "GET /alfaindex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:45 -0500] "GET /alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:45 -0500] "GET /c99.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:46 -0500] "GET /cmd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:31:47 -0500] "GET /cw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:31:48 -0500] "GET /date.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:48 -0500] "GET /haxor.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:31:49 -0500] "GET /icomsium.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:50 -0500] "GET /ico.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:51 -0500] "GET /leaf.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:31:51 -0500] "GET /marijuana.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:52 -0500] "GET /mass.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:52 -0500] "GET /mini.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:53 -0500] "GET /priv8.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.192.164 - - [13/Jul/2025:13:31:53 -0500] "GET /pws.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:54 -0500] "GET /r57.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 209.145.62.177 - - [13/Jul/2025:13:31:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752431515.4848339557647705078125 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 146.70.192.164 - - [13/Jul/2025:13:31:55 -0500] "GET /robots.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:55 -0500] "GET /snd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:56 -0500] "GET /wp-class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:56 -0500] "GET /new-index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:57 -0500] "GET /wp-content/batm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:58 -0500] "GET /wp-content/masshp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:31:58 -0500] "GET /wp-content/alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:59 -0500] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:31:59 -0500] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:32:00 -0500] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:01 -0500] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:01 -0500] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:02 -0500] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:03 -0500] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:03 -0500] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:32:04 -0500] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:05 -0500] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:32:06 -0500] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:07 -0500] "GET /wp-content/think.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.164 - - [13/Jul/2025:13:32:08 -0500] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:08 -0500] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:32:09 -0500] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.164 - - [13/Jul/2025:13:32:10 -0500] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.192.164 - - [13/Jul/2025:13:32:11 -0500] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:12 -0500] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:13 -0500] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:13 -0500] "GET /class-wp-widget-archives.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:32:14 -0500] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:15 -0500] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.164 - - [13/Jul/2025:13:32:16 -0500] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:17 -0500] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:17 -0500] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:18 -0500] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:32:19 -0500] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:20 -0500] "GET /xt/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:21 -0500] "GET /xleet-shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:22 -0500] "GET /xleet.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:22 -0500] "GET /xleetshell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:23 -0500] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:32:24 -0500] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:25 -0500] "GET /xlt.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:32:26 -0500] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:27 -0500] "GET /wp-content/xleet.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:27 -0500] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:28 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:29 -0500] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:30 -0500] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:31 -0500] "GET /nf_tracking.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:31 -0500] "GET /class.api.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:32 -0500] "GET /xl2023.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:33 -0500] "GET /wp-head.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:34 -0500] "GET /wp-pano.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:35 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:35 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:32:36 -0500] "GET /xmlrpc.php HTTP/1.1" 405 60 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:37 -0500] "GET /wp-admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:37 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:38 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.164 - - [13/Jul/2025:13:32:39 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:40 -0500] "GET /WSOEnigma.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:40 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:42 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:42 -0500] "GET /about/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:32:43 -0500] "GET /index/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:44 -0500] "GET /mah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:44 -0500] "GET /mah/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:45 -0500] "GET /test.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:46 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:47 -0500] "GET /gebase.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:47 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:32:48 -0500] "GET /asasx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:49 -0500] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:50 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:32:51 -0500] "GET /contact.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.164 - - [13/Jul/2025:13:32:52 -0500] "GET /classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:53 -0500] "GET /goods.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:53 -0500] "GET /wp-add.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:54 -0500] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:55 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:56 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:32:57 -0500] "GET /403.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:32:58 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:32:58 -0500] "GET /wp-includes/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:32:59 -0500] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:33:00 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:01 -0500] "GET /wp-includes/css/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:02 -0500] "GET /text.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:33:03 -0500] "GET /xc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:33:04 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:05 -0500] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.192.164 - - [13/Jul/2025:13:33:06 -0500] "GET /1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.192.164 - - [13/Jul/2025:13:33:07 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.192.164 - - [13/Jul/2025:13:33:07 -0500] "GET /filemanager/dialog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:08 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:09 -0500] "GET /bk/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:33:11 -0500] "GET /css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:12 -0500] "GET /go.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.192.164 - - [13/Jul/2025:13:33:13 -0500] "GET /files/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:14 -0500] "GET /byp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:15 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:16 -0500] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.192.164 - - [13/Jul/2025:13:33:17 -0500] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:33:18 -0500] "GET /gawean.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:19 -0500] "GET /baxa1.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:33:19 -0500] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:33:20 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:21 -0500] "GET /click.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.192.164 - - [13/Jul/2025:13:33:22 -0500] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:33:22 -0500] "GET /wp-content/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:23 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:33:24 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:25 -0500] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:26 -0500] "GET /baxa1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:33:27 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:28 -0500] "GET /in.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.192.164 - - [13/Jul/2025:13:33:29 -0500] "GET /geju.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:29 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.192.164 - - [13/Jul/2025:13:33:30 -0500] "GET /wp-signup.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.192.164 - - [13/Jul/2025:13:33:31 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:32 -0500] "GET /elp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:32 -0500] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:33 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:34 -0500] "GET /chosen-667.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.192.164 - - [13/Jul/2025:13:33:35 -0500] "GET /network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:35 -0500] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:36 -0500] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.192.164 - - [13/Jul/2025:13:33:36 -0500] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 403 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:37 -0500] "GET /wp-admin/x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.192.164 - - [13/Jul/2025:13:33:37 -0500] "GET /yanz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:38 -0500] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:33:39 -0500] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:39 -0500] "GET /wp-admin/maint/go.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:40 -0500] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:41 -0500] "GET /worm0.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:42 -0500] "GET /wp-content/cong.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:43 -0500] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:33:44 -0500] "GET /wp-content/languages/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:44 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:45 -0500] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:33:46 -0500] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:46 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:33:47 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:48 -0500] "GET /first.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:49 -0500] "GET /admin/log.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:33:49 -0500] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:51 -0500] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:33:52 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:52 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:33:53 -0500] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 209.145.62.177 - - [13/Jul/2025:13:33:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752431635.1093089580535888671875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 149.88.106.178 - - [13/Jul/2025:13:33:54 -0500] "GET /wp-includes/bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:55 -0500] "GET /bs1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:56 -0500] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:57 -0500] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:33:57 -0500] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:58 -0500] "GET /cron.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:33:59 -0500] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.106.178 - - [13/Jul/2025:13:34:00 -0500] "GET /db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:01 -0500] "GET /fm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:02 -0500] "GET /wp-includes/customize/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:03 -0500] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:04 -0500] "GET /a.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:34:05 -0500] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:34:06 -0500] "GET /wp-includes/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:34:07 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:08 -0500] "GET /back.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:10 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:34:11 -0500] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:12 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:13 -0500] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:34:14 -0500] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:34:15 -0500] "GET /new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:16 -0500] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:17 -0500] "GET /wp-includes/images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.178 - - [13/Jul/2025:13:34:18 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:19 -0500] "GET /phpfm3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:20 -0500] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:21 -0500] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:21 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:34:23 -0500] "GET /post.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:23 -0500] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:25 -0500] "GET /wp-admin/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:34:25 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:32 -0500] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:32 -0500] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:34:33 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:33 -0500] "GET /wp-admin/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:34 -0500] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:35 -0500] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:35 -0500] "GET /randkeyword.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.178 - - [13/Jul/2025:13:34:36 -0500] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:36 -0500] "GET /xxx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:37 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:34:37 -0500] "GET /ulc6.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:38 -0500] "GET /lv.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:39 -0500] "GET /zip.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.178 - - [13/Jul/2025:13:34:40 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:40 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.178 - - [13/Jul/2025:13:34:41 -0500] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:42 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:43 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:34:43 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.178 - - [13/Jul/2025:13:34:44 -0500] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.178 - - [13/Jul/2025:13:34:45 -0500] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:34:46 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:34:47 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:34:47 -0500] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:48 -0500] "GET /wp-content/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.178 - - [13/Jul/2025:13:34:48 -0500] "GET /wp-cron.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:34:49 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:34:49 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:50 -0500] "GET /jp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:51 -0500] "GET /rcc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:34:52 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:34:53 -0500] "GET /layout.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.178 - - [13/Jul/2025:13:34:54 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:55 -0500] "GET /history.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:56 -0500] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:34:58 -0500] "GET /images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:34:59 -0500] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:35:00 -0500] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:01 -0500] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:35:02 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:04 -0500] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:35:06 -0500] "GET /wp-links.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:07 -0500] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:35:09 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:10 -0500] "GET /randkeyword.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:11 -0500] "GET /login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:12 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:13 -0500] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:14 -0500] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:15 -0500] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:35:16 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.178 - - [13/Jul/2025:13:35:17 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.178 - - [13/Jul/2025:13:35:17 -0500] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:18 -0500] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:19 -0500] "GET /wp-admin/about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:35:19 -0500] "GET /wander.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:35:20 -0500] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:35:22 -0500] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:22 -0500] "GET /wp-config-sample.php HTTP/1.1" 500 1004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:22 -0500] "GET /admin/upload/css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:23 -0500] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:24 -0500] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:26 -0500] "GET /images/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:35:27 -0500] "GET /manager.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.106.178 - - [13/Jul/2025:13:35:28 -0500] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:30 -0500] "GET /users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:35:31 -0500] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:32 -0500] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:33 -0500] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:34 -0500] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:35 -0500] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:35:36 -0500] "GET /wp-content/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:37 -0500] "GET /function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.178 - - [13/Jul/2025:13:35:38 -0500] "GET /wp-admin/network/about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:40 -0500] "GET /wp-admin/user/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:41 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:42 -0500] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.178 - - [13/Jul/2025:13:35:43 -0500] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:35:45 -0500] "GET /wp-includes/js/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:45 -0500] "GET /plugins/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:47 -0500] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:48 -0500] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:49 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:35:50 -0500] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:51 -0500] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:35:52 -0500] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:53 -0500] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.178 - - [13/Jul/2025:13:35:54 -0500] "GET /wp-mail.php HTTP/1.1" 403 1060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:55 -0500] "GET /baxa1.phP8 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:35:57 -0500] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:35:58 -0500] "GET /.well-known/accah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:00 -0500] "GET /admin-post.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:36:01 -0500] "GET /conf_upload.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:02 -0500] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:36:03 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:36:05 -0500] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:06 -0500] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 209.145.62.177 - - [13/Jul/2025:13:36:09 -0500] "POST /wp-cron.php?doing_wp_cron=1752431769.0527350902557373046875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 149.88.106.178 - - [13/Jul/2025:13:36:07 -0500] "GET /wp-configs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:09 -0500] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:09 -0500] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:11 -0500] "GET /cgi-bin/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:12 -0500] "GET /f35.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:13 -0500] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:36:14 -0500] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:15 -0500] "GET /wp-admin/license.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:36:16 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:17 -0500] "GET /files.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:18 -0500] "GET /webadmin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:20 -0500] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.178 - - [13/Jul/2025:13:36:21 -0500] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:36:22 -0500] "GET /wsa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:23 -0500] "GET /wp-content/json.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:36:24 -0500] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:36:25 -0500] "GET /cgi-bin/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:26 -0500] "GET /woh.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:27 -0500] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:36:27 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:36:28 -0500] "GET /bless.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:29 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:30 -0500] "GET /info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:36:30 -0500] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.106.178 - - [13/Jul/2025:13:36:31 -0500] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:36:32 -0500] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.106.178 - - [13/Jul/2025:13:36:33 -0500] "GET /readme.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:36:34 -0500] "GET /wp-content/blue.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:36:35 -0500] "GET /packed.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:36 -0500] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:37 -0500] "GET /file/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:36:38 -0500] "GET /wp-admin/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:39 -0500] "GET /plugin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:36:40 -0500] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:42 -0500] "GET /wp-includes/Text/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.178 - - [13/Jul/2025:13:36:43 -0500] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:44 -0500] "GET /chosen.php?upload HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:36:45 -0500] "GET /load.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:36:46 -0500] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:36:47 -0500] "GET /edit-tags.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:49 -0500] "GET /wp-includes/rk2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:50 -0500] "GET /saka.phP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:51 -0500] "GET /lock.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:52 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:54 -0500] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:55 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:55 -0500] "GET /wordpress/wp-includes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:36:56 -0500] "GET /templates/beez5/error.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:36:58 -0500] "GET /product.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:36:59 -0500] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.178 - - [13/Jul/2025:13:37:00 -0500] "GET /wp-content/item.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:01 -0500] "GET /wp-includes/plugin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:37:02 -0500] "GET /base.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:03 -0500] "GET /wp-content/mah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:37:05 -0500] "GET /zero.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:06 -0500] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 200 125843 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:07 -0500] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:08 -0500] "GET /.well-known/pki-validation/aurocuus.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:08 -0500] "GET /style.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:37:09 -0500] "GET /db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:11 -0500] "GET /wp-admin/options.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:12 -0500] "GET /wp-content/plugin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:13 -0500] "GET /wp-set.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:15 -0500] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:37:16 -0500] "GET /wp-includes/mah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:37:16 -0500] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:37:17 -0500] "GET /images/images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:18 -0500] "GET /wp-admin/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:37:19 -0500] "GET /assets/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.178 - - [13/Jul/2025:13:37:20 -0500] "GET /.well-known/bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:37:21 -0500] "GET /wp-admin/cong.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:21 -0500] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:22 -0500] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:37:22 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:37:23 -0500] "GET /Files/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:24 -0500] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:24 -0500] "GET /wp-content/uploads/aves.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:25 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:26 -0500] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:37:26 -0500] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:37:27 -0500] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:27 -0500] "GET /wp-admin/install.php HTTP/1.1" 403 6628 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:27 -0500] "GET /pages.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:28 -0500] "GET /bulk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:29 -0500] "GET /kk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:30 -0500] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:30 -0500] "GET /wp-logout.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:31 -0500] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:32 -0500] "GET /img/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:33 -0500] "GET /wp-includes/packed.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:34 -0500] "GET /wp-setup.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:34 -0500] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:37:34 -0500] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:37:35 -0500] "GET /wp-editor.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:36 -0500] "GET /wp-simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:37 -0500] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:37 -0500] "GET /.well-known/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:38 -0500] "GET /wp-includes/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:39 -0500] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:37:40 -0500] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:41 -0500] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:41 -0500] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:42 -0500] "GET /hehehehe.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:42 -0500] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:37:43 -0500] "GET /pgs.phP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:37:44 -0500] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:37:44 -0500] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:45 -0500] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:46 -0500] "GET /wp-admin/maint/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:47 -0500] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:48 -0500] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.178 - - [13/Jul/2025:13:37:48 -0500] "GET /header.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:37:49 -0500] "GET /gecko.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:50 -0500] "GET /Files/Mo0n.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:51 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.178 - - [13/Jul/2025:13:37:51 -0500] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:52 -0500] "GET /bk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:37:53 -0500] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:53 -0500] "GET /templates/beez3/error.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.178 - - [13/Jul/2025:13:37:54 -0500] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:54 -0500] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:37:55 -0500] "GET /wp-admin/maint/pongs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:56 -0500] "GET /wp-content/uploads/config.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:56 -0500] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:57 -0500] "GET /wp-includes/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:58 -0500] "GET /sym.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:37:59 -0500] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.178 - - [13/Jul/2025:13:38:00 -0500] "GET /wp-includes/images/votes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:38:00 -0500] "GET /wp-content/hello.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:01 -0500] "GET /wp-content/uploads/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:38:02 -0500] "GET /update/403.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.178 - - [13/Jul/2025:13:38:03 -0500] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:04 -0500] "GET /sk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:05 -0500] "GET /wp-content/x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:38:06 -0500] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.178 - - [13/Jul/2025:13:38:07 -0500] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:07 -0500] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.178 - - [13/Jul/2025:13:38:08 -0500] "GET /images/Marvins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:38:09 -0500] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:10 -0500] "GET /.well-known/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:10 -0500] "GET /images/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.178 - - [13/Jul/2025:13:38:11 -0500] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:38:12 -0500] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:12 -0500] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.178 - - [13/Jul/2025:13:38:12 -0500] "GET /wp-admin/user/network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:13 -0500] "GET /sys.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:14 -0500] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:15 -0500] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:38:15 -0500] "GET /wp-user.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:38:16 -0500] "GET /customize.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:16 -0500] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.178 - - [13/Jul/2025:13:38:17 -0500] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:17 -0500] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:18 -0500] "GET /fm1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:19 -0500] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.178 - - [13/Jul/2025:13:38:19 -0500] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:20 -0500] "GET /wp-settings.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:20 -0500] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:21 -0500] "GET /wp-file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:22 -0500] "GET /wp-content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:22 -0500] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:23 -0500] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.178 - - [13/Jul/2025:13:38:23 -0500] "GET /ioxi01.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:24 -0500] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:24 -0500] "GET /l/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.178 - - [13/Jul/2025:13:38:25 -0500] "GET /wp-includes/js/item.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.178 - - [13/Jul/2025:13:38:26 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:26 -0500] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:27 -0500] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:27 -0500] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:28 -0500] "GET /wp-content/wp-atom.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:28 -0500] "GET /wp-includes/mani.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:29 -0500] "GET /xx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:38:29 -0500] "GET /.well-known/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:30 -0500] "GET /css/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:38:31 -0500] "GET /.well-known/Ex34L.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.178 - - [13/Jul/2025:13:38:31 -0500] "GET /wp-admin/css/colors/room.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:32 -0500] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:32 -0500] "GET /randkeyword.PhP8 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:33 -0500] "GET /wp-includes/network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.178 - - [13/Jul/2025:13:38:34 -0500] "GET /images.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:34 -0500] "GET /wp-aespa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:35 -0500] "GET /wp-includes/defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.178 - - [13/Jul/2025:13:38:36 -0500] "GET /cgi-bin/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.178 - - [13/Jul/2025:13:38:36 -0500] "GET /wp-admin/includes/doc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.178 - - [13/Jul/2025:13:38:37 -0500] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.178 - - [13/Jul/2025:13:38:37 -0500] "GET /.well-known/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:39 -0500] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:39 -0500] "GET /wp-content/product.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:38:40 -0500] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:38:41 -0500] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:38:42 -0500] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.23.89 - - [13/Jul/2025:13:38:43 -0500] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:44 -0500] "GET /wp-l0gin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:45 -0500] "GET /backup/sid.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:38:46 -0500] "GET /.well-known/bosctspi.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:38:47 -0500] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:48 -0500] "GET /.well-known/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:38:49 -0500] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:38:49 -0500] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:38:50 -0500] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:51 -0500] "GET /wp-admin/defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:52 -0500] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:53 -0500] "GET /images/worksec.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:54 -0500] "GET /images/rest.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:55 -0500] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.23.89 - - [13/Jul/2025:13:38:56 -0500] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:57 -0500] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:38:58 -0500] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:38:59 -0500] "GET /baxa1.phP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:00 -0500] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:01 -0500] "GET /.well-known/xoxo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:03 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:04 -0500] "GET /0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:05 -0500] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:39:07 -0500] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:08 -0500] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:39:08 -0500] "GET /wpn.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:39:09 -0500] "GET /wp-content/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:10 -0500] "GET /cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:11 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:11 -0500] "GET /upload.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:13 -0500] "GET /init.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:39:14 -0500] "GET /wp-admin/users.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:15 -0500] "GET /wp-blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:16 -0500] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:17 -0500] "GET /wp-admin/images/module.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:17 -0500] "GET /wp-includes/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:39:18 -0500] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:19 -0500] "GET /payout.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:20 -0500] "GET /lock360.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:39:22 -0500] "GET /x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:23 -0500] "GET /wp_info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:24 -0500] "GET /wp-content/upload.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:39:25 -0500] "GET /xml.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:26 -0500] "GET /by.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:39:27 -0500] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:39:28 -0500] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:39:29 -0500] "GET /wp-admin/includes/users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:30 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:31 -0500] "GET /wp-admin/alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:39:32 -0500] "GET /wp-content/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:33 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.23.89 - - [13/Jul/2025:13:39:34 -0500] "GET /wp-includes/wp-class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:35 -0500] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:36 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:37 -0500] "GET /default.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:38 -0500] "GET /fox.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:39:39 -0500] "GET /google.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:40 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 409 1144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:41 -0500] "GET /ovatools.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:42 -0500] "GET /sidwso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:39:43 -0500] "GET /worksec.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:44 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:46 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:39:47 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:47 -0500] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:49 -0500] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:39:50 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:51 -0500] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:51 -0500] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:39:53 -0500] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:54 -0500] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 209.145.62.177 - - [13/Jul/2025:13:39:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752431995.7506029605865478515625 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 149.88.23.89 - - [13/Jul/2025:13:39:54 -0500] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:56 -0500] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:57 -0500] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:57 -0500] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:39:58 -0500] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:39:59 -0500] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:00 -0500] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:40:01 -0500] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:01 -0500] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:02 -0500] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.23.89 - - [13/Jul/2025:13:40:03 -0500] "GET /Simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:05 -0500] "GET /wp-blog-header.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.23.89 - - [13/Jul/2025:13:40:06 -0500] "GET /style2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:07 -0500] "GET /wp-scripts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:09 -0500] "GET /adminfuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:40:09 -0500] "GET /cjfuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:11 -0500] "GET /comfunctions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:40:12 -0500] "GET /delpaths.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:40:13 -0500] "GET /epinyins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:40:13 -0500] "GET /filefuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.23.89 - - [13/Jul/2025:13:40:14 -0500] "GET /hinfofuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.23.89 - - [13/Jul/2025:13:40:15 -0500] "GET /qfunctions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:16 -0500] "GET /qinfofuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:17 -0500] "GET /thoms.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.23.89 - - [13/Jul/2025:13:40:18 -0500] "GET /postnews.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:40:19 -0500] "GET /admin-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:40:20 -0500] "GET /link.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:21 -0500] "GET /ms-themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:22 -0500] "GET /my-sites.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:40:23 -0500] "GET /media.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:24 -0500] "GET /nav-menus.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:25 -0500] "GET /menu.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:26 -0500] "GET /options-head.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:27 -0500] "GET /revision.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.23.89 - - [13/Jul/2025:13:40:27 -0500] "GET /widgets.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:40:29 -0500] "GET /term.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.23.89 - - [13/Jul/2025:13:40:29 -0500] "GET /system_log.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:40:30 -0500] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.23.89 - - [13/Jul/2025:13:40:31 -0500] "GET /moded.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:40:32 -0500] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:33 -0500] "GET /wp-includes/images/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:34 -0500] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:35 -0500] "GET /upgrade.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:36 -0500] "GET /gh.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:37 -0500] "GET /version.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:38 -0500] "GET /head.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:39 -0500] "GET /index1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:40 -0500] "GET /theme-insqbzk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:41 -0500] "GET /good.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:42 -0500] "GET /main.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:40:43 -0500] "GET /wp-22.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:44 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:44 -0500] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:45 -0500] "GET /wsoyanz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:40:46 -0500] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:40:46 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:40:48 -0500] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:40:49 -0500] "GET /wp-admin/images/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.23.89 - - [13/Jul/2025:13:40:50 -0500] "GET /alfa-rex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:50 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:51 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:52 -0500] "GET /css/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.23.89 - - [13/Jul/2025:13:40:54 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:55 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:56 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.23.89 - - [13/Jul/2025:13:40:57 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:40:58 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:40:59 -0500] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:41:00 -0500] "GET /wp-includes/wso112233.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:01 -0500] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:02 -0500] "GET /.well-known/bala.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:04 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:41:05 -0500] "GET /wp-includes/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:06 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:07 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:08 -0500] "GET /wp-content/repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:09 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:10 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:11 -0500] "GET /cache-compat.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:12 -0500] "GET /ajax-actions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.23.89 - - [13/Jul/2025:13:41:13 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:14 -0500] "GET /wp-consar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:15 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:16 -0500] "GET /alfanew.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:17 -0500] "GET /adminfuns.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:18 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:41:19 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:21 -0500] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:22 -0500] "GET /wp-content/style-css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.23.89 - - [13/Jul/2025:13:41:23 -0500] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:23 -0500] "GET /chosen.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:24 -0500] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:25 -0500] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:26 -0500] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:41:27 -0500] "GET /cgi-bin/mariju.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:28 -0500] "GET /wp-includes/css/options.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:28 -0500] "GET /sx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.23.89 - - [13/Jul/2025:13:41:29 -0500] "GET /wp-content/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:30 -0500] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:31 -0500] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:32 -0500] "GET /update/gely.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:41:33 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:34 -0500] "GET /images/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:35 -0500] "GET /web.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:36 -0500] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:37 -0500] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:38 -0500] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:41:40 -0500] "GET /assets/images/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:40 -0500] "GET /wp-uploads-config.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:41:41 -0500] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:42 -0500] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:43 -0500] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:44 -0500] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:46 -0500] "GET /wp-admin/user/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:47 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:41:48 -0500] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:48 -0500] "GET /makeasmtp.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:41:50 -0500] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:51 -0500] "GET /wp-conflg.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:41:52 -0500] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:53 -0500] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:54 -0500] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:55 -0500] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.23.89 - - [13/Jul/2025:13:41:56 -0500] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:57 -0500] "GET /about.php?525 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:41:58 -0500] "GET /indeex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:41:59 -0500] "GET /as.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:42:00 -0500] "GET /dropdown.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:01 -0500] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:42:02 -0500] "GET /wp-admin/images/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:03 -0500] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:42:04 -0500] "GET /admin.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:06 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:07 -0500] "GET /buy.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:08 -0500] "GET /bs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:09 -0500] "GET /wp-admin/network/plugins.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:10 -0500] "GET /credits.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:11 -0500] "GET /edit-comments.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:42:12 -0500] "GET /checkbox.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:13 -0500] "GET /export.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:42:14 -0500] "GET /input.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:42:15 -0500] "GET /load-scripts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:42:16 -0500] "GET /load-styles.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:17 -0500] "GET /options-discussion.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.23.89 - - [13/Jul/2025:13:42:18 -0500] "GET /options-general.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:42:18 -0500] "GET /options-permalink.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:19 -0500] "GET /options-privacy.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:20 -0500] "GET /options-reading.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:21 -0500] "GET /options-writing.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:22 -0500] "GET /post-new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:42:22 -0500] "GET /privacy.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:23 -0500] "GET /profile.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:24 -0500] "GET /site-health.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:25 -0500] "GET /tools.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:26 -0500] "GET /update-core.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.23.89 - - [13/Jul/2025:13:42:27 -0500] "GET /user-edit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:42:28 -0500] "GET /user-new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:29 -0500] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:30 -0500] "GET /bar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:42:31 -0500] "GET /samll.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:42:32 -0500] "GET /webdb.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.23.89 - - [13/Jul/2025:13:42:33 -0500] "GET /100.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:34 -0500] "GET /plugin-install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.23.89 - - [13/Jul/2025:13:42:35 -0500] "GET /km.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:36 -0500] "GET /LA.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:37 -0500] "GET /wp-good.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:38 -0500] "GET /wp-ldd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:39 -0500] "GET /sgd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:40 -0500] "GET /nf_tracking.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:41 -0500] "GET /wzy.php?action=door123 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:42:42 -0500] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:42 -0500] "GET /ioxi002.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:43 -0500] "GET /chosen.php?p=\\u001b[0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:45 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:46 -0500] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:47 -0500] "GET /dropdown.php%5Cu001b%5B0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:47 -0500] "GET /wp-admin/user/about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:42:49 -0500] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 149.88.23.89 - - [13/Jul/2025:13:42:50 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.23.89 - - [13/Jul/2025:13:42:51 -0500] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:42:52 -0500] "GET /class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.23.89 - - [13/Jul/2025:13:42:53 -0500] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:54 -0500] "GET /Njima.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:55 -0500] "GET /ynz.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:42:56 -0500] "GET /index.php?3x=3x HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:56 -0500] "GET /wp-admin/network/class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:57 -0500] "GET /.tmb/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:42:58 -0500] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:42:59 -0500] "GET /FroggBaba.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:43:00 -0500] "GET /admin.php%5Cu001b%5B0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:01 -0500] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:02 -0500] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.23.89 - - [13/Jul/2025:13:43:02 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:43:03 -0500] "GET /wp-includes/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:43:04 -0500] "GET /sts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:43:05 -0500] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:06 -0500] "GET /wp-admin/maint/users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:06 -0500] "GET /wp-content/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:07 -0500] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:08 -0500] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:43:09 -0500] "GET /st.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:10 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:11 -0500] "GET /about.php%5Cu001b%5B0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:12 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:13 -0500] "GET /GA13.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:14 -0500] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:43:15 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.23.89 - - [13/Jul/2025:13:43:16 -0500] "GET /wp-content/tmpls.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:17 -0500] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:18 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:19 -0500] "GET /about.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:20 -0500] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:21 -0500] "GET /crop.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:22 -0500] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:23 -0500] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:43:24 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:25 -0500] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.23.89 - - [13/Jul/2025:13:43:26 -0500] "GET /gali.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:26 -0500] "GET /wp-admin/wso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.23.89 - - [13/Jul/2025:13:43:27 -0500] "GET /cache/i/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:28 -0500] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:30 -0500] "GET /dir.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:30 -0500] "GET /dirs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.23.89 - - [13/Jul/2025:13:43:31 -0500] "GET /abouts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:32 -0500] "GET /malls.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:33 -0500] "GET /liefs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 149.88.23.89 - - [13/Jul/2025:13:43:34 -0500] "GET /uc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.23.89 - - [13/Jul/2025:13:43:35 -0500] "GET /locks.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.23.89 - - [13/Jul/2025:13:43:36 -0500] "GET /wp-dsdd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.23.89 - - [13/Jul/2025:13:43:37 -0500] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:43:38 -0500] "GET /css/bun.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:43:39 -0500] "GET /js/edit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:43:40 -0500] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:40 -0500] "GET /wp-themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:43:41 -0500] "GET /wp-uploads.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.133 - - [13/Jul/2025:13:43:42 -0500] "GET /wp-files.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:43 -0500] "GET /t.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.133 - - [13/Jul/2025:13:43:44 -0500] "GET /autoload_classmap.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:44 -0500] "GET /stindex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:43:45 -0500] "GET /shop.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:46 -0500] "GET /test/test.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:46 -0500] "GET /exit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:47 -0500] "GET /install.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:43:47 -0500] "GET /max.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:48 -0500] "GET /wp-load.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:43:49 -0500] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:43:49 -0500] "GET /aa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 149.88.106.133 - - [13/Jul/2025:13:43:50 -0500] "GET /assets/images/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:50 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:51 -0500] "GET /worm3.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:43:51 -0500] "GET /shellv3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:43:52 -0500] "GET /sh.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:43:53 -0500] "GET /.well-known/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:43:53 -0500] "GET /cgi-bin/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:43:54 -0500] "GET /cgi-bin/users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:43:54 -0500] "GET /function.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 149.88.106.133 - - [13/Jul/2025:13:43:55 -0500] "GET /m.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:56 -0500] "GET /delete3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:56 -0500] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:57 -0500] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:43:57 -0500] "GET /mm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:58 -0500] "GET /cgi-bin/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:43:59 -0500] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.133 - - [13/Jul/2025:13:44:00 -0500] "GET /server.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:01 -0500] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:01 -0500] "GET /mailer.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.133 - - [13/Jul/2025:13:44:02 -0500] "GET /fm.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:03 -0500] "GET /phpzipincs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:05 -0500] "GET /wp-blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:06 -0500] "GET /www.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:06 -0500] "GET /css/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:07 -0500] "GET /css/wp-casper.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:08 -0500] "GET /cache.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:08 -0500] "GET /mah.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:09 -0500] "GET /cong.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:10 -0500] "GET /assets/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:11 -0500] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:12 -0500] "GET /wp-header.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:13 -0500] "GET /shop.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:14 -0500] "GET /ioxi001.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:15 -0500] "GET /c.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:15 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:16 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:16 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:17 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:18 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:44:19 -0500] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:19 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:22 -0500] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:23 -0500] "GET /wp-admin/js/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:44:23 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:24 -0500] "GET /wp-content/upgrade/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:44:25 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:26 -0500] "GET /wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:26 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:27 -0500] "GET /wp-includes/ID3 HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:27 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:28 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:28 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.133 - - [13/Jul/2025:13:44:29 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:30 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:30 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:31 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:44:31 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:32 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:33 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:34 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:34 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:35 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:35 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:44:36 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:37 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.133 - - [13/Jul/2025:13:44:37 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:38 -0500] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:44:38 -0500] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:39 -0500] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:40 -0500] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:44:40 -0500] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:41 -0500] "GET /upload/image/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:42 -0500] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:42 -0500] "GET /wordpress/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.133 - - [13/Jul/2025:13:44:43 -0500] "GET /blog/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:44 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:44:45 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:44:45 -0500] "GET /admin/editor/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:47 -0500] "GET /admin/images/slider/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:47 -0500] "GET /admin/tmp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:48 -0500] "GET /admin/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:44:49 -0500] "GET /Admin/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:50 -0500] "GET /admin/uploads/images/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.133 - - [13/Jul/2025:13:44:51 -0500] "GET /administrator/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.133 - - [13/Jul/2025:13:44:51 -0500] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:52 -0500] "GET /assets/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:53 -0500] "GET /cgi-bin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:54 -0500] "GET /components/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:54 -0500] "GET /home/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:44:55 -0500] "GET /include/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.133 - - [13/Jul/2025:13:44:56 -0500] "GET /modules/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:57 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:58 -0500] "GET /mt/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:44:58 -0500] "GET /site/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:44:59 -0500] "GET /tmps/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:00 -0500] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:01 -0500] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 149.88.106.133 - - [13/Jul/2025:13:45:02 -0500] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:45:03 -0500] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:03 -0500] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:04 -0500] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:45:06 -0500] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:45:07 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.133 - - [13/Jul/2025:13:45:07 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.133 - - [13/Jul/2025:13:45:08 -0500] "GET /wp-content/languages/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:09 -0500] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:45:09 -0500] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:10 -0500] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:11 -0500] "GET /wp-includes/css/dist/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:11 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:12 -0500] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:13 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.133 - - [13/Jul/2025:13:45:13 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 149.88.106.133 - - [13/Jul/2025:13:45:14 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:45:15 -0500] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:45:15 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:45:16 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:17 -0500] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.133 - - [13/Jul/2025:13:45:17 -0500] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:45:18 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.133 - - [13/Jul/2025:13:45:18 -0500] "GET /cache-wordpress/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:45:19 -0500] "GET /cakil/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:20 -0500] "GET /cekidot/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:45:20 -0500] "GET /ubh/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 149.88.106.133 - - [13/Jul/2025:13:45:21 -0500] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 149.88.106.133 - - [13/Jul/2025:13:45:21 -0500] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 149.88.106.133 - - [13/Jul/2025:13:45:22 -0500] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:23 -0500] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:23 -0500] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 2600:3000:1511:200::82 - - [13/Jul/2025:13:45:24 -0500] "GET /.well-known/acme-challenge/ZQXbJYVA4klo7sjuRAbHf5_EUEp1JxnrQDoFK-UpRRM HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 149.88.106.133 - - [13/Jul/2025:13:45:24 -0500] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:25 -0500] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:26 -0500] "GET /wp-content/plugins/db/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:45:27 -0500] "GET /wp-content/plugins/home/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:45:27 -0500] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:28 -0500] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:29 -0500] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:45:29 -0500] "GET /wp-content/plugins/random/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:30 -0500] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:30 -0500] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:31 -0500] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:32 -0500] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:45:32 -0500] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 149.88.106.133 - - [13/Jul/2025:13:45:33 -0500] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:33 -0500] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:45:34 -0500] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:35 -0500] "GET /wp-content/themes/alera/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:45:35 -0500] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:45:36 -0500] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:37 -0500] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 149.88.106.133 - - [13/Jul/2025:13:45:38 -0500] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:45:38 -0500] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:39 -0500] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 149.88.106.133 - - [13/Jul/2025:13:45:40 -0500] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:40 -0500] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 149.88.106.133 - - [13/Jul/2025:13:45:41 -0500] "GET /admin/upload/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 149.88.106.133 - - [13/Jul/2025:13:45:42 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 149.88.106.133 - - [13/Jul/2025:13:45:43 -0500] "GET /up/.well-known/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 149.88.106.133 - - [13/Jul/2025:13:45:43 -0500] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.177.72.104 - - [13/Jul/2025:13:45:58 -0500] "GET /.git/HEAD HTTP/1.1" 301 - "-" "-" 185.177.72.104 - - [13/Jul/2025:13:45:59 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.131.71.50 - - [13/Jul/2025:13:50:31 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 51.222.71.146 - - [13/Jul/2025:14:13:51 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 31.207.37.136 - - [13/Jul/2025:14:24:25 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 64.227.144.163 - - [13/Jul/2025:14:35:11 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 47.88.61.91 - - [13/Jul/2025:14:35:14 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 64.227.144.163 - - [13/Jul/2025:14:35:16 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19034 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:35:22 -0500] "GET /.well-known/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:35:29 -0500] "GET /.well-known/ HTTP/1.1" 404 19034 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:35:41 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:35:51 -0500] "GET /sites/default/files/ HTTP/1.1" 404 19036 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:35:59 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:06 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 19036 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:18 -0500] "GET /uploads/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:24 -0500] "GET /uploads/ HTTP/1.1" 404 19034 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:34 -0500] "GET /images/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:40 -0500] "GET /images/ HTTP/1.1" 404 19034 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:47 -0500] "GET /files/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 64.227.144.163 - - [13/Jul/2025:14:36:52 -0500] "GET /files/ HTTP/1.1" 404 19034 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 51.68.107.137 - - [13/Jul/2025:14:38:53 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.107.137 - - [13/Jul/2025:14:38:54 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.107.137 - - [13/Jul/2025:14:39:19 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.107.137 - - [13/Jul/2025:14:39:51 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 2600:3000:2710:200::81 - - [13/Jul/2025:14:50:22 -0500] "GET /.well-known/acme-challenge/HMX8ZlsDYcB2qC9gCVe1lH851qQskNj6gtgPdLPqMeI HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 43.152.72.247 - - [13/Jul/2025:15:33:33 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.225.54.44 - - [13/Jul/2025:15:36:16 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 66.249.79.2 - - [13/Jul/2025:15:49:08 -0500] "GET /wp-content/plugins/revslider/public/js/sr7.js?ver=6.7.23 HTTP/1.1" 200 91007 "https://www.corals.io/specialists/saeed-matar/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2600:3000:2710:200::82 - - [13/Jul/2025:15:55:23 -0500] "GET /.well-known/acme-challenge/wSMU6Ty31v7cpXVo1u2lHA-R4MzyGhVWPNGNOQj_-Hw HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 222.129.141.120 - - [13/Jul/2025:16:13:44 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:20:11 -0500] "GET /admin/uploads/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:12 -0500] "GET /admin/uploads/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:13 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:14 -0500] "GET /admin/function.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:15 -0500] "GET /doc/function.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:15 -0500] "GET /doc/function.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:17 -0500] "GET /file/function.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:17 -0500] "GET /file/function.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:18 -0500] "GET /alfanew.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:19 -0500] "GET /alfanew.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:20 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:20 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:22 -0500] "GET /wp-mail.php HTTP/1.1" 403 1060 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:22 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:23 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:24 -0500] "GET /WSOEnigma.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:25 -0500] "GET /WSOEnigma.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:26 -0500] "GET /adminfuns.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:27 -0500] "GET /adminfuns.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:28 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:29 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:30 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:31 -0500] "GET /ini.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:32 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:33 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:33 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:34 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:35 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:35 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:36 -0500] "GET /upfile.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:37 -0500] "GET /upfile.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:38 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:38 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:39 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:40 -0500] "GET /wp-includes/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:40 -0500] "GET /wp-includes/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:41 -0500] "GET /zwso.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:42 -0500] "GET /zwso.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:43 -0500] "GET /bypass.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:43 -0500] "GET /bypass.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:44 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:45 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:46 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:47 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:49 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:49 -0500] "GET /moon.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:50 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:51 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:52 -0500] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:53 -0500] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:55 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:55 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:57 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:58 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:20:58 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:00 -0500] "GET /wp-admin.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:01 -0500] "GET /wp-admin.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:02 -0500] "GET /404.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:02 -0500] "GET /404.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:04 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:04 -0500] "GET /wp-includes/css/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:06 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:06 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:07 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:08 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:09 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:10 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:11 -0500] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:12 -0500] "GET /css/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:13 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:14 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:15 -0500] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:15 -0500] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:17 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:17 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:18 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:19 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:20 -0500] "GET /wp-admin/includes/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:20 -0500] "GET /wp-admin/includes/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:21 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:22 -0500] "GET /sites/default/files/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:23 -0500] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:23 -0500] "GET /wp-admin/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:24 -0500] "GET /assets/images/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:24 -0500] "GET /assets/images/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:25 -0500] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:26 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:26 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:27 -0500] "GET /wp-activate.php HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:28 -0500] "GET /cache-compat.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:29 -0500] "GET /cache-compat.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:30 -0500] "GET /admin-post.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:30 -0500] "GET /admin-post.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:31 -0500] "GET /wp-sigunq.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:32 -0500] "GET /wp-sigunq.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:33 -0500] "GET /index/function.php/img/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:33 -0500] "GET /index/function.php/img/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:34 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:34 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:35 -0500] "GET /upload/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:36 -0500] "GET /upload/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:37 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:37 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:38 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:38 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:39 -0500] "GET /ALFA_DATA/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:39 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:40 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:41 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:41 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:42 -0500] "GET /wp-signup.php HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:44 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:44 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:45 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:52 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:52 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:53 -0500] "GET /post.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:54 -0500] "GET /post.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:55 -0500] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:56 -0500] "GET /images/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:56 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:57 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:21:58 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:01 -0500] "GET /wsoyanz.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:01 -0500] "GET /wsoyanz.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:02 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:03 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:04 -0500] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:06 -0500] "GET /as/function HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:06 -0500] "GET /as/function HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:07 -0500] "GET /images/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:08 -0500] "GET /images/cloud.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:08 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:09 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:10 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:11 -0500] "GET /alfa-rex.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:11 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:12 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:13 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:14 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:15 -0500] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:16 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:17 -0500] "GET /wp-comments-post.php HTTP/1.1" 405 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:17 -0500] "GET /wp-cron.php HTTP/1.1" 200 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:17 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:18 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:20 -0500] "GET /ws.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:20 -0500] "GET /ws.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:21 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:21 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:22 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:23 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:24 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:25 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:26 -0500] "GET /mah/function.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:27 -0500] "GET /mah/function.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:28 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:29 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:30 -0500] "GET /bak.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:31 -0500] "GET /bak.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:32 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:33 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:34 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:34 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:36 -0500] "GET /ws.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:37 -0500] "GET /ws.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:38 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:38 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:39 -0500] "GET /yanz.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:40 -0500] "GET /yanz.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:41 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:41 -0500] "GET /makeasmtp.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:43 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:43 -0500] "GET /shell.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:44 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:45 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:46 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:47 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:48 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:49 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:50 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:50 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:51 -0500] "GET /log.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:52 -0500] "GET /log.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:53 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:54 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:55 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:55 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:56 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:57 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:22:58 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:00 -0500] "GET /wp-content/themes/ HTTP/1.1" 200 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:00 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:01 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:02 -0500] "GET /wp-load.php HTTP/1.1" 200 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:02 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:03 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:04 -0500] "GET /wp-includes/sodium_compat/namespaced HTTP/1.1" 301 262 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:04 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:04 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:05 -0500] "GET /css.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:06 -0500] "GET /css.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:07 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:07 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:08 -0500] "GET /blog.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:09 -0500] "GET /blog.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:10 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:11 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:12 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:12 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:14 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:15 -0500] "GET /wp-includes/customize/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:16 -0500] "GET /wp-content/plugins/ HTTP/1.1" 200 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:16 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:17 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:18 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:19 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:20 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:21 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:22 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:22 -0500] "GET /cgi-bin/about.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:24 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:24 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:25 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:26 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:27 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:28 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:29 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:30 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:31 -0500] "GET /img/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:32 -0500] "GET /img/about.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:33 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:34 -0500] "GET /alfanew2.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:35 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:35 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:36 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:37 -0500] "GET /inputs.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:38 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:39 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:40 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:40 -0500] "GET /wp-content/updates.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:42 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:42 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:43 -0500] "GET /wp-includes/js/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:43 -0500] "GET /wp-includes/js/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:44 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:44 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:45 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:46 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:47 -0500] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:47 -0500] "GET /img/xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:48 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 36 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:48 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:49 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:50 -0500] "GET /plugins/function.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:51 -0500] "GET /plugins/function.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:52 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:52 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:54 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:54 -0500] "GET /plugins.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:56 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:56 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:57 -0500] "GET /wp-consar.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:58 -0500] "GET /wp-consar.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:23:59 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:00 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:02 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:03 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:04 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:04 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:06 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:07 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:08 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:09 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:10 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:10 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:11 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:12 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:13 -0500] "GET /uploads/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:14 -0500] "GET /uploads/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:15 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:15 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:16 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:17 -0500] "GET /content.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:18 -0500] "GET /content.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:19 -0500] "GET /wp-content/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:19 -0500] "GET /wp-content/about.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:20 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:21 -0500] "GET /wp-admin/maint/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:22 -0500] "GET /repeater.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:23 -0500] "GET /repeater.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:23 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:24 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:25 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:25 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:26 -0500] "GET /install.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:27 -0500] "GET /install.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:27 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:28 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:29 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:29 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:30 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:31 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:31 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:32 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:33 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:33 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:34 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:35 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:36 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:36 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:37 -0500] "GET /wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:38 -0500] "GET /wp-conflg.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:39 -0500] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:39 -0500] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:41 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:41 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:42 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 36 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:42 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:43 -0500] "GET /wp-includes/images/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:44 -0500] "GET /.well-known/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:44 -0500] "GET /.well-known/about.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:45 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:46 -0500] "GET /radio.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:47 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:48 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:24:49 -0500] "GET /ae.php HTTP/1.1" 301 - "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:50 -0500] "HEAD /wordpress HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:50 -0500] "GET /ae.php HTTP/1.1" 404 18399 "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:51 -0500] "HEAD / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:51 -0500] "GET /usersfiles/ HTTP/1.1" 301 - "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:52 -0500] "HEAD /wp HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:52 -0500] "GET /usersfiles/ HTTP/1.1" 404 19034 "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:53 -0500] "HEAD /wp HTTP/1.1" 404 - "http://corals.io/wp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:54 -0500] "GET /avaa.php HTTP/1.1" 301 - "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:54 -0500] "HEAD /bc HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.227.179.176 - - [13/Jul/2025:16:24:54 -0500] "HEAD /bc HTTP/1.1" 404 - "http://corals.io/bc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:54 -0500] "GET /avaa.php HTTP/1.1" 404 18399 "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:55 -0500] "HEAD /bk HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.227.179.176 - - [13/Jul/2025:16:24:56 -0500] "HEAD /bk HTTP/1.1" 404 - "http://corals.io/bk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:56 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:57 -0500] "HEAD /backup HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.227.179.176 - - [13/Jul/2025:16:24:57 -0500] "HEAD /backup HTTP/1.1" 404 - "http://corals.io/backup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:57 -0500] "GET /edit.php HTTP/1.1" 404 18399 "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:58 -0500] "HEAD /old HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:58 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "-" 35.227.179.176 - - [13/Jul/2025:16:24:59 -0500] "HEAD /old HTTP/1.1" 404 - "http://corals.io/old" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.227.179.176 - - [13/Jul/2025:16:25:00 -0500] "HEAD /new HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:24:59 -0500] "GET /simple.php HTTP/1.1" 404 18399 "-" "-" 35.227.179.176 - - [13/Jul/2025:16:25:00 -0500] "HEAD /new HTTP/1.1" 404 - "http://corals.io/new" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.227.179.176 - - [13/Jul/2025:16:25:01 -0500] "HEAD /main HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:25:00 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 - "-" "-" 35.227.179.176 - - [13/Jul/2025:16:25:02 -0500] "HEAD /main HTTP/1.1" 404 - "http://corals.io/main" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:25:02 -0500] "GET /wp-includes/about.php HTTP/1.1" 404 18399 "-" "-" 35.227.179.176 - - [13/Jul/2025:16:25:03 -0500] "HEAD /home HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.74.61.175 - - [13/Jul/2025:16:25:03 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:05 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:07 -0500] "GET /ajax-actions.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:08 -0500] "GET /ajax-actions.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:09 -0500] "GET /wp-2019.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:10 -0500] "GET /wp-2019.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:12 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:12 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:13 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:14 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:14 -0500] "GET /wp-p.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:15 -0500] "GET /wp-p.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:16 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:16 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:17 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:18 -0500] "GET /chosen.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:19 -0500] "GET /fw.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:19 -0500] "GET /fw.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:20 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:21 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:22 -0500] "GET /ebs.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:23 -0500] "GET /ebs.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:23 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:24 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:25 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:25 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:26 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:27 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:28 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:28 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:29 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:30 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:32 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:33 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:34 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:35 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:37 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:37 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:39 -0500] "GET /classsmtps.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:40 -0500] "GET /classsmtps.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:41 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:43 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:45 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:45 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:47 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:48 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:49 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:50 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:52 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:53 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19036 "-" "-" 209.145.62.177 - - [13/Jul/2025:16:25:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752441955.5188660621643066406250 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 13.74.61.175 - - [13/Jul/2025:16:25:54 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:55 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:57 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:58 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:25:59 -0500] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:00 -0500] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:01 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:04 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:05 -0500] "GET /alfanew.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:06 -0500] "GET /alfanew.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:07 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:07 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:09 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:09 -0500] "GET /updates.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:10 -0500] "GET /updates.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:11 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:11 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:13 -0500] "GET /hoot.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:13 -0500] "GET /hoot.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:14 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:15 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:16 -0500] "GET /mail.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:16 -0500] "GET /mail.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:17 -0500] "GET /about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:17 -0500] "GET /about.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:18 -0500] "GET /xmlrpc.php HTTP/1.1" 405 60 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:19 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:19 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:20 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:20 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:21 -0500] "GET /img/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:22 -0500] "GET /img/cloud.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:23 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:23 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:25 -0500] "GET /images/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:26 -0500] "GET /images/about.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:27 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:30 -0500] "GET /cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:30 -0500] "GET /cloud.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:32 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:32 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:34 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:35 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:36 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:37 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:39 -0500] "GET /plugins/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:39 -0500] "GET /plugins/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:41 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:42 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:43 -0500] "GET /dropdown.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:44 -0500] "GET /dropdown.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:45 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:46 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:47 -0500] "GET /wp-blog-header.php HTTP/1.1" 404 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:47 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:48 -0500] "GET /admin.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:49 -0500] "GET /wp-content/repeater.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:49 -0500] "GET /wp-content/repeater.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:51 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:51 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:52 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:53 -0500] "GET /wp-includes/Text/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:54 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:55 -0500] "GET /wp.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:56 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 36 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:56 -0500] "GET /as.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:57 -0500] "GET /as.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:58 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:59 -0500] "GET /themes.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:26:59 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:00 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:01 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:01 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:03 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:03 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 404 19036 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:04 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:05 -0500] "GET /wp-admin/meta/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:05 -0500] "GET /.well-knownold/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:06 -0500] "GET /.well-knownold/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:07 -0500] "GET /about.php7 HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:07 -0500] "GET /about.php7 HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:08 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:09 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:10 -0500] "GET /css/cloud.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:10 -0500] "GET /css/cloud.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:11 -0500] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:12 -0500] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:13 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:14 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:15 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:16 -0500] "GET /.well-known/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:17 -0500] "GET /about/function.php HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:17 -0500] "GET /about/function.php HTTP/1.1" 404 18399 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:19 -0500] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:19 -0500] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:21 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:21 -0500] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 404 18401 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:22 -0500] "GET /templates/beez3/ HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:23 -0500] "GET /templates/beez3/ HTTP/1.1" 404 19034 "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:26 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 - "-" "-" 13.74.61.175 - - [13/Jul/2025:16:27:27 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 18401 "-" "-" 204.8.96.84 - - [13/Jul/2025:16:36:05 -0500] "GET / HTTP/1.1" 301 - "corals.io" "Mozilla/5.0 (Linux; Android 5.1; E506) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Mobile Safari/537.36" 2600:3000:1511:200::82 - - [13/Jul/2025:17:00:28 -0500] "GET /.well-known/acme-challenge/rW37Lr32gnEE2gY4sjo9Z_AsQqO-zAq5elGxaAkpxQ8 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 141.95.53.61 - - [13/Jul/2025:17:12:57 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 34.69.99.69 - - [13/Jul/2025:17:32:15 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.37.234.111 - - [13/Jul/2025:17:36:49 -0500] "GET /contact/ HTTP/1.1" 301 - "http://corals.io/contact/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.37.234.111 - - [13/Jul/2025:17:36:50 -0500] "GET /contact/ HTTP/1.1" 200 31526 "http://www.corals.io/contact/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.159.129.125 - - [13/Jul/2025:17:55:16 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 196.251.84.110 - - [13/Jul/2025:18:00:51 -0500] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 84020 "-" "-" 2600:3000:1511:200::81 - - [13/Jul/2025:18:05:22 -0500] "GET /.well-known/acme-challenge/Zd8IDtRkTmFeJDp2wWMSRjjIFZgvljAO-kBAv9ZTxKo HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 43.133.69.37 - - [13/Jul/2025:18:14:20 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 202.172.28.58 - - [13/Jul/2025:18:31:05 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 4.196.89.32 - - [13/Jul/2025:18:54:18 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:19 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:21 -0500] "GET /file.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:22 -0500] "GET /file.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:24 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:25 -0500] "GET /moon.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:28 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:29 -0500] "GET /admin.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:31 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:32 -0500] "GET /radio.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:35 -0500] "GET /log.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:36 -0500] "GET /log.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:38 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:39 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:40 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:41 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:42 -0500] "GET /wp-includes/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:44 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:45 -0500] "GET /simple.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:46 -0500] "GET /about.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:47 -0500] "GET /about.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:48 -0500] "GET /404.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:49 -0500] "GET /404.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:51 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:52 -0500] "GET /admin/function.php HTTP/1.1" 404 18399 "-" "-" 209.145.62.177 - - [13/Jul/2025:18:54:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752450895.1732759475708007812500 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 4.196.89.32 - - [13/Jul/2025:18:54:54 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:55 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:57 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:54:58 -0500] "GET /wp-includes/assets/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:01 -0500] "GET /info.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:02 -0500] "GET /info.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:05 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:07 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:09 -0500] "GET /config.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:10 -0500] "GET /config.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:12 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:14 -0500] "GET /wp-admin/js/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:16 -0500] "GET /fm.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:17 -0500] "GET /fm.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:19 -0500] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:20 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:22 -0500] "GET /ty.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:23 -0500] "GET /ty.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:25 -0500] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:26 -0500] "GET /wp-includes/assets/admin.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:28 -0500] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:29 -0500] "GET /wp-includes/fonts/admin.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:31 -0500] "GET /403.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:31 -0500] "GET /403.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:32 -0500] "GET /as.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:33 -0500] "GET /as.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:35 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:37 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:39 -0500] "GET /index/function.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:40 -0500] "GET /index/function.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:42 -0500] "GET /wp-content/themes/include.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:43 -0500] "GET /wp-content/themes/include.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:45 -0500] "GET /alfa.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:46 -0500] "GET /alfa.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:48 -0500] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:49 -0500] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:51 -0500] "GET /css.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:52 -0500] "GET /css.php HTTP/1.1" 404 18399 "-" "-" 209.145.62.177 - - [13/Jul/2025:18:55:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752450955.6613368988037109375000 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 4.196.89.32 - - [13/Jul/2025:18:55:54 -0500] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:56 -0500] "GET /wp-content/themes/plugin.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:58 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:55:59 -0500] "GET /wp-admin/includes/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:01 -0500] "GET /index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:03 -0500] "GET /classwithtostring.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:04 -0500] "GET /classwithtostring.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:06 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:08 -0500] "GET /autoload_classmap.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:11 -0500] "GET /item.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:12 -0500] "GET /item.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:14 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:16 -0500] "GET /ini.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:18 -0500] "GET /default.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:19 -0500] "GET /default.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:20 -0500] "GET /wp-admin/network/about.php HTTP/1.1" 302 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:22 -0500] "GET /ok.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:23 -0500] "GET /ok.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:25 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:26 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:28 -0500] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:29 -0500] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:31 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:33 -0500] "GET /inputs.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:35 -0500] "GET /1.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:36 -0500] "GET /1.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:39 -0500] "GET /infoo.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:40 -0500] "GET /infoo.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:42 -0500] "GET /cong.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:44 -0500] "GET /cong.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:46 -0500] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:47 -0500] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:49 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:50 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:53 -0500] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:55 -0500] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:57 -0500] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:56:58 -0500] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:00 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:00 -0500] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:01 -0500] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:03 -0500] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:05 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:07 -0500] "GET /wp-content/index.php HTTP/1.1" 200 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:08 -0500] "GET /css/colors/blue/atomlib.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:09 -0500] "GET /css/colors/blue/atomlib.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:11 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:12 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:14 -0500] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:15 -0500] "GET /wp-includes/assets/themes.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:18 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:19 -0500] "GET /shell.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:21 -0500] "GET /install.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:22 -0500] "GET /install.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:25 -0500] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:26 -0500] "GET /wp-content/languages/chosen.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:28 -0500] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:29 -0500] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:31 -0500] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:32 -0500] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:34 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:35 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:38 -0500] "GET /wp-content/packed.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:39 -0500] "GET /wp-content/packed.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:41 -0500] "GET /assets/images/doc.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:42 -0500] "GET /assets/images/doc.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:44 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:45 -0500] "GET /wp.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:47 -0500] "GET /wp-content/themes/file.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:48 -0500] "GET /wp-content/themes/file.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:50 -0500] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:51 -0500] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:53 -0500] "GET /m.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:54 -0500] "GET /m.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:56 -0500] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:57 -0500] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:57:59 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:01 -0500] "GET /themes.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:03 -0500] "GET /manager.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:05 -0500] "GET /manager.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:08 -0500] "GET /x.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:09 -0500] "GET /x.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:12 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:13 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:15 -0500] "GET /muse.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:17 -0500] "GET /muse.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:19 -0500] "GET /alfa-rex2.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:20 -0500] "GET /alfa-rex2.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:23 -0500] "GET /wp-content/uploads/json.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:24 -0500] "GET /wp-content/uploads/json.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:27 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:28 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:31 -0500] "GET /post.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:32 -0500] "GET /post.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:35 -0500] "GET /cgi-bin/upfile.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:36 -0500] "GET /cgi-bin/upfile.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:39 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:40 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:42 -0500] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:43 -0500] "GET /wp-admin/user/chosen.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:46 -0500] "GET /news.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:47 -0500] "GET /news.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:49 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:51 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:54 -0500] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:55 -0500] "GET /wp-content/uploads/2024/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:57 -0500] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:58:59 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:01 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:02 -0500] "GET /plugins.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:05 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:06 -0500] "GET /chosen.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:09 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:11 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:13 -0500] "GET /images/admin.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:14 -0500] "GET /images/admin.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:17 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:18 -0500] "GET /edit.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:21 -0500] "GET /wp-admin/user/admin.php HTTP/1.1" 302 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:27 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:28 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19036 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:30 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:31 -0500] "GET /makeasmtp.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:33 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:35 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:37 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:38 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:40 -0500] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:42 -0500] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:44 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:45 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 18401 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:48 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:49 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 18399 "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:52 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:57 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:18:59:58 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19034 "-" "-" 4.196.89.32 - - [13/Jul/2025:19:00:01 -0500] "GET /wp-admin/yindu.php HTTP/1.1" 301 - "-" "-" 4.196.89.32 - - [13/Jul/2025:19:00:03 -0500] "GET /wp-admin/yindu.php HTTP/1.1" 404 18399 "-" "-" 42.118.173.195 - - [13/Jul/2025:19:04:18 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2600:3000:2710:200::82 - - [13/Jul/2025:19:10:24 -0500] "GET /.well-known/acme-challenge/vH6b7sIm66QW8iblLcTjOzYay6zLLQ7n9WowPfX70IQ HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 91.190.136.30 - - [13/Jul/2025:19:18:11 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 4.227.36.46 - - [13/Jul/2025:19:36:31 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 108.141.166.46 - - [13/Jul/2025:19:58:46 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "*" 108.141.166.46 - - [13/Jul/2025:19:58:46 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0" 3.111.196.136 - - [13/Jul/2025:20:05:11 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 2600:3000:1511:200::84 - - [13/Jul/2025:20:15:22 -0500] "GET /.well-known/acme-challenge/0158V-jvlNP78DLp-R_mjoEJtAUw7zgLovu7vwtJkRQ HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 51.68.111.199 - - [13/Jul/2025:20:17:47 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.111.199 - - [13/Jul/2025:20:17:50 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 137.184.37.40 - - [13/Jul/2025:20:35:09 -0500] "GET /js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.62 Safari/537.36" 137.184.37.40 - - [13/Jul/2025:20:35:11 -0500] "GET /js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 18401 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.62 Safari/537.36" 137.184.37.40 - - [13/Jul/2025:20:35:15 -0500] "GET /admin/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.62 Safari/537.36" 137.184.37.40 - - [13/Jul/2025:20:35:18 -0500] "GET /admin/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 18401 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.62 Safari/537.36" 137.184.37.40 - - [13/Jul/2025:20:35:23 -0500] "GET /tinymce/plugins/filemanager/dialog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.62 Safari/537.36" 137.184.37.40 - - [13/Jul/2025:20:35:27 -0500] "GET /tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 18401 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.62 Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:14 -0500] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:20 -0500] "GET /akc.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:25 -0500] "GET /akp.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:28 -0500] "GET /wp_wlx.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:33 -0500] "GET /law.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:37 -0500] "GET /admin.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:43 -0500] "GET /file52.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:49 -0500] "GET /alfa.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:53 -0500] "GET /NewFile.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:46:59 -0500] "GET /about.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:47:08 -0500] "GET /edit-tags.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:47:11 -0500] "GET /file5.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:47:14 -0500] "GET /ava.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:47:18 -0500] "GET /ton.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:9fa:: - - [13/Jul/2025:20:47:24 -0500] "GET /wp-admin/admin-wolf.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.67.143 - - [13/Jul/2025:20:47:46 -0500] "GET /.env HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.67.143 - - [13/Jul/2025:20:47:47 -0500] "POST / HTTP/1.1" 200 44600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 216.37.42.34 - - [13/Jul/2025:20:56:02 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 54.36.148.60 - - [13/Jul/2025:21:00:58 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 205.210.31.46 - - [13/Jul/2025:21:16:39 -0500] "GET / HTTP/1.1" 301 - "-" "-" 2600:3000:2710:200::82 - - [13/Jul/2025:21:20:26 -0500] "GET /.well-known/acme-challenge/R6R3k1Iprc9QaYcJqg1thiTEFBE2w-Zq-R0IhdvSJ9M HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 43.167.232.38 - - [13/Jul/2025:21:23:04 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "GET / HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "POST /alfacgiapi/perl.alfa HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:35 -0500] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:35 -0500] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:35 -0500] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "POST /wp-plain.php HTTP/1.1" 404 18399 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:34 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 196.251.87.218 - - [13/Jul/2025:21:31:38 -0500] "GET /lrisxfhs.php?Fox=d3wL7 HTTP/1.1" 404 18399 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.251.85.93 - - [13/Jul/2025:22:22:44 -0500] "POST /?xwp_upd=1 HTTP/1.1" 200 44600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 2600:3000:2710:200::81 - - [13/Jul/2025:22:25:22 -0500] "GET /.well-known/acme-challenge/TOlasNXz90ZaFM-ZKm5ZuVcr3qOEaQx3PNFvQLw7KIY HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 198.235.24.149 - - [13/Jul/2025:22:29:42 -0500] "GET / HTTP/1.1" 301 - "-" "-" 13.239.7.200 - - [13/Jul/2025:22:56:54 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 107.174.224.18 - - [13/Jul/2025:22:58:23 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0" 2804:b44:1000::35 - - [13/Jul/2025:23:10:53 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 135.125.181.14 - - [13/Jul/2025:23:20:06 -0500] "GET / HTTP/1.1" 301 - "https://www.google.co.uk" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 114.119.159.6 - - [13/Jul/2025:23:28:16 -0500] "GET /robots.txt HTTP/1.1" 200 114 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 2600:3000:1511:200::84 - - [13/Jul/2025:23:30:20 -0500] "GET /.well-known/acme-challenge/aMNq9bi3lNIjbAojHCkrRXPIeh4EUfP1OPnX0ZyN5ZI HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 20.171.207.214 - - [13/Jul/2025:23:59:18 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 43.153.47.201 - - [14/Jul/2025:00:01:58 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.121.102.176 - - [14/Jul/2025:00:17:49 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 132.145.196.107 - - [14/Jul/2025:00:30:22 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:96.0) Gecko/20071914 Firefox/96.0" 2600:3000:1511:200::82 - - [14/Jul/2025:00:35:23 -0500] "GET /.well-known/acme-challenge/CVHK9EPGm_iBjDTQaH80WL1T6rDXJo8FVqZ4F5uGqnA HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 45.43.19.212 - - [14/Jul/2025:01:19:41 -0500] "GET /wp-admin/network/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.43.19.212 - - [14/Jul/2025:01:19:41 -0500] "GET /natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:19:42 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:19:42 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.43.19.212 - - [14/Jul/2025:01:19:48 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:19:48 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:49 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:49 -0500] "GET /wp-includes/bk/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:50 -0500] "GET /file2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:50 -0500] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:51 -0500] "GET /file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.43.19.212 - - [14/Jul/2025:01:19:51 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:52 -0500] "GET /item.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:19:52 -0500] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.43.19.212 - - [14/Jul/2025:01:19:53 -0500] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:53 -0500] "GET /zwso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:54 -0500] "GET /wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 209.145.62.177 - - [14/Jul/2025:01:19:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752473995.0143940448760986328125 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 45.43.19.212 - - [14/Jul/2025:01:19:54 -0500] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:55 -0500] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:55 -0500] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:19:56 -0500] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:56 -0500] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.43.19.212 - - [14/Jul/2025:01:19:57 -0500] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:19:57 -0500] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:58 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:19:59 -0500] "GET /templates/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:19:59 -0500] "GET /cong.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:00 -0500] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:00 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:00 -0500] "GET /dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:01 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:01 -0500] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:02 -0500] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:03 -0500] "GET /repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:04 -0500] "GET /wp-2019.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:05 -0500] "GET /atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:06 -0500] "GET /css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:06 -0500] "GET /log.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.43.19.212 - - [14/Jul/2025:01:20:07 -0500] "GET /index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:08 -0500] "GET /mail.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.43.19.212 - - [14/Jul/2025:01:20:08 -0500] "GET /lufix.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:09 -0500] "GET /doc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:10 -0500] "GET /bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:10 -0500] "GET /content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:11 -0500] "GET /upfile.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:12 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:12 -0500] "GET /bypass.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:13 -0500] "GET /wp-activate.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:13 -0500] "GET /updates.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:14 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:15 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.43.19.212 - - [14/Jul/2025:01:20:15 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:16 -0500] "GET /ae.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:16 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:17 -0500] "GET /blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:17 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.43.19.212 - - [14/Jul/2025:01:20:18 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:18 -0500] "GET /as.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:19 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.43.19.212 - - [14/Jul/2025:01:20:20 -0500] "GET /ws.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:20 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:21 -0500] "GET /wp-sigunq.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:22 -0500] "GET /wso112233.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:22 -0500] "GET /wp-atom.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:23 -0500] "GET /alfanew.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:23 -0500] "GET /fw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:24 -0500] "GET /install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.43.19.212 - - [14/Jul/2025:01:20:25 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:26 -0500] "GET /wp-admin/shapes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:26 -0500] "GET /XxX.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:26 -0500] "GET /Marvins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:27 -0500] "GET /wp-includes/css/modules.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:27 -0500] "GET /olux.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:28 -0500] "GET /wso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:28 -0500] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:29 -0500] "GET /uploader.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:30 -0500] "GET /1337.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.43.19.212 - - [14/Jul/2025:01:20:30 -0500] "GET /user.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:31 -0500] "GET /wp-info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:31 -0500] "GET /wxo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:32 -0500] "GET /amigo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.43.19.212 - - [14/Jul/2025:01:20:32 -0500] "GET /yoi.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:32 -0500] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:33 -0500] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:33 -0500] "GET /wp-contentt.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:33 -0500] "GET /we1y8.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:34 -0500] "GET /wp-content/iu.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:34 -0500] "GET /ccx/th3_err0r.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:35 -0500] "GET /ccx/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:35 -0500] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:35 -0500] "GET /hehe.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.43.19.212 - - [14/Jul/2025:01:20:36 -0500] "GET /post-data.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:36 -0500] "GET /w0.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.43.19.212 - - [14/Jul/2025:01:20:37 -0500] "GET /old-index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:37 -0500] "GET /wsanon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:38 -0500] "GET /wp-content/small.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:38 -0500] "GET /wp-content/mode.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:38 -0500] "GET /indo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:39 -0500] "GET /beence.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.43.19.212 - - [14/Jul/2025:01:20:39 -0500] "GET /indosec.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:40 -0500] "GET /archives.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:40 -0500] "GET /po8sa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:40 -0500] "GET /thesmartestx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:41 -0500] "GET /zcanp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:41 -0500] "GET /burjuva.aspx HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:41 -0500] "GET /pvt.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.43.19.212 - - [14/Jul/2025:01:20:42 -0500] "GET /shell20211028.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:42 -0500] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.43.19.212 - - [14/Jul/2025:01:20:42 -0500] "GET /crypted.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:43 -0500] "GET /h0110w4y.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:43 -0500] "GET /vesiw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:43 -0500] "GET /w.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:44 -0500] "GET /wp-db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:44 -0500] "GET /wp-includes/lx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.43.19.212 - - [14/Jul/2025:01:20:44 -0500] "GET /wp-content/ice.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:45 -0500] "GET /wp-content/lx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:45 -0500] "GET /lx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:45 -0500] "GET /tonant.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:46 -0500] "GET /f0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:46 -0500] "GET /config.bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:47 -0500] "GET /bypass403.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:47 -0500] "GET /adminer.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.43.19.212 - - [14/Jul/2025:01:20:47 -0500] "GET /allahnaber.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:48 -0500] "GET /AK-74.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:48 -0500] "GET /alfa3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:48 -0500] "GET /alfaindex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:49 -0500] "GET /alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:49 -0500] "GET /c99.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:49 -0500] "GET /cmd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:50 -0500] "GET /cw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:50 -0500] "GET /date.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.43.19.212 - - [14/Jul/2025:01:20:51 -0500] "GET /haxor.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:51 -0500] "GET /icomsium.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:51 -0500] "GET /ico.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.43.19.212 - - [14/Jul/2025:01:20:52 -0500] "GET /leaf.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:52 -0500] "GET /marijuana.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.43.19.212 - - [14/Jul/2025:01:20:52 -0500] "GET /mass.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:53 -0500] "GET /mini.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:53 -0500] "GET /priv8.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:53 -0500] "GET /pws.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.43.19.212 - - [14/Jul/2025:01:20:54 -0500] "GET /r57.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:54 -0500] "GET /robots.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 209.145.62.177 - - [14/Jul/2025:01:20:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752474055.2768769264221191406250 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 45.43.19.212 - - [14/Jul/2025:01:20:54 -0500] "GET /snd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:20:55 -0500] "GET /wp-class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:20:55 -0500] "GET /new-index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.43.19.212 - - [14/Jul/2025:01:20:56 -0500] "GET /wp-content/batm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:56 -0500] "GET /wp-content/masshp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.43.19.212 - - [14/Jul/2025:01:20:56 -0500] "GET /wp-content/alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:57 -0500] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:57 -0500] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:57 -0500] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:58 -0500] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:58 -0500] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:59 -0500] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:20:59 -0500] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.43.19.212 - - [14/Jul/2025:01:20:59 -0500] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.43.19.212 - - [14/Jul/2025:01:21:00 -0500] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:00 -0500] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:00 -0500] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:01 -0500] "GET /wp-content/think.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:01 -0500] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:02 -0500] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:02 -0500] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:03 -0500] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:04 -0500] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:05 -0500] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:06 -0500] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:06 -0500] "GET /class-wp-widget-archives.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:07 -0500] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.43.19.212 - - [14/Jul/2025:01:21:08 -0500] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:08 -0500] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:09 -0500] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:09 -0500] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.43.19.212 - - [14/Jul/2025:01:21:10 -0500] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:10 -0500] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:11 -0500] "GET /xt/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.43.19.212 - - [14/Jul/2025:01:21:11 -0500] "GET /xleet-shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.43.19.212 - - [14/Jul/2025:01:21:12 -0500] "GET /xleet.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.43.19.212 - - [14/Jul/2025:01:21:12 -0500] "GET /xleetshell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:13 -0500] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:13 -0500] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:14 -0500] "GET /xlt.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:14 -0500] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:15 -0500] "GET /wp-content/xleet.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:15 -0500] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.43.19.212 - - [14/Jul/2025:01:21:16 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.43.19.212 - - [14/Jul/2025:01:21:17 -0500] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.43.19.212 - - [14/Jul/2025:01:21:17 -0500] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:21:18 -0500] "GET /nf_tracking.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:18 -0500] "GET /class.api.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:19 -0500] "GET /xl2023.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:19 -0500] "GET /wp-head.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:19 -0500] "GET /wp-pano.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:20 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:21:20 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:21:20 -0500] "GET /xmlrpc.php HTTP/1.1" 405 60 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:21 -0500] "GET /wp-admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:21:21 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:22 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:22 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:23 -0500] "GET /WSOEnigma.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:21:23 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:24 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:24 -0500] "GET /about/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:21:24 -0500] "GET /index/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:25 -0500] "GET /mah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:25 -0500] "GET /mah/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:25 -0500] "GET /test.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:21:26 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:21:26 -0500] "GET /gebase.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:26 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:21:27 -0500] "GET /asasx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:21:27 -0500] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:27 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:21:28 -0500] "GET /contact.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:21:28 -0500] "GET /classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:28 -0500] "GET /goods.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:29 -0500] "GET /wp-add.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:29 -0500] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:21:30 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:21:30 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:21:30 -0500] "GET /403.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:31 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:31 -0500] "GET /wp-includes/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:31 -0500] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:32 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:21:32 -0500] "GET /wp-includes/css/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:32 -0500] "GET /text.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:33 -0500] "GET /xc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:33 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:21:33 -0500] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:34 -0500] "GET /1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:34 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:21:35 -0500] "GET /filemanager/dialog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.80 - - [14/Jul/2025:01:21:35 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:35 -0500] "GET /bk/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:36 -0500] "GET /css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:21:36 -0500] "GET /go.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:21:36 -0500] "GET /files/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:37 -0500] "GET /byp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:21:37 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:37 -0500] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:38 -0500] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:38 -0500] "GET /gawean.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:21:39 -0500] "GET /baxa1.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:21:39 -0500] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:39 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:40 -0500] "GET /click.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:40 -0500] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:21:40 -0500] "GET /wp-content/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:41 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:41 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:41 -0500] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:21:42 -0500] "GET /baxa1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:42 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:21:43 -0500] "GET /in.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:21:43 -0500] "GET /geju.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:21:44 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:21:44 -0500] "GET /wp-signup.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:44 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:21:45 -0500] "GET /elp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:21:45 -0500] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:46 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:46 -0500] "GET /chosen-667.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:47 -0500] "GET /network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:47 -0500] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:21:48 -0500] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:21:48 -0500] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 403 1060 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:21:48 -0500] "GET /wp-admin/x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:49 -0500] "GET /yanz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:21:49 -0500] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:49 -0500] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:50 -0500] "GET /wp-admin/maint/go.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:50 -0500] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:50 -0500] "GET /worm0.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:21:51 -0500] "GET /wp-content/cong.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:51 -0500] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:21:52 -0500] "GET /wp-content/languages/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:52 -0500] "GET /wp-admin/maint/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:52 -0500] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:53 -0500] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:21:53 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:21:53 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:21:54 -0500] "GET /first.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:54 -0500] "GET /admin/log.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:55 -0500] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:21:55 -0500] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:55 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:56 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:21:56 -0500] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:57 -0500] "GET /wp-includes/bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:57 -0500] "GET /bs1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:57 -0500] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:21:58 -0500] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:21:58 -0500] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:21:59 -0500] "GET /cron.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:21:59 -0500] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:00 -0500] "GET /db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:00 -0500] "GET /fm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:00 -0500] "GET /wp-includes/customize/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:01 -0500] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:01 -0500] "GET /a.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:22:02 -0500] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:03 -0500] "GET /wp-includes/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:03 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:05 -0500] "GET /back.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:06 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:06 -0500] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:07 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:22:07 -0500] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:08 -0500] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:08 -0500] "GET /new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:08 -0500] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:22:09 -0500] "GET /wp-includes/images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:09 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:10 -0500] "GET /phpfm3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:10 -0500] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:11 -0500] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:11 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:11 -0500] "GET /post.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:12 -0500] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:12 -0500] "GET /wp-admin/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:13 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:13 -0500] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:14 -0500] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:22:14 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:14 -0500] "GET /wp-admin/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:22:15 -0500] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:16 -0500] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:16 -0500] "GET /randkeyword.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:16 -0500] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:16 -0500] "GET /xxx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:17 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:17 -0500] "GET /ulc6.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:18 -0500] "GET /lv.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:18 -0500] "GET /zip.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:19 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:20 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:20 -0500] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:22:20 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:21 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:22 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:22:22 -0500] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:23 -0500] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:23 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:22:23 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:23 -0500] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:24 -0500] "GET /wp-content/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:24 -0500] "GET /wp-cron.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:22:24 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:25 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:25 -0500] "GET /jp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:26 -0500] "GET /rcc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:22:26 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:26 -0500] "GET /layout.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:27 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:27 -0500] "GET /history.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:22:28 -0500] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:28 -0500] "GET /images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:28 -0500] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:29 -0500] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:29 -0500] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:29 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:30 -0500] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:30 -0500] "GET /wp-links.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:31 -0500] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:31 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:31 -0500] "GET /randkeyword.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:32 -0500] "GET /login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:22:32 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:32 -0500] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:33 -0500] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:33 -0500] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:34 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:34 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:35 -0500] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:22:35 -0500] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:36 -0500] "GET /wp-admin/about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:22:37 -0500] "GET /wander.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:37 -0500] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:38 -0500] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:38 -0500] "GET /wp-config-sample.php HTTP/1.1" 500 1004 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:38 -0500] "GET /admin/upload/css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:38 -0500] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:39 -0500] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:22:39 -0500] "GET /images/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:40 -0500] "GET /manager.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:40 -0500] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:41 -0500] "GET /users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:41 -0500] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:42 -0500] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:42 -0500] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:43 -0500] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:22:43 -0500] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:44 -0500] "GET /wp-content/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:22:44 -0500] "GET /function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:22:44 -0500] "GET /wp-admin/network/about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:22:45 -0500] "GET /wp-admin/user/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:47 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:22:47 -0500] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:47 -0500] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:48 -0500] "GET /wp-includes/js/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:49 -0500] "GET /plugins/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:49 -0500] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:22:49 -0500] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:50 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:50 -0500] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:51 -0500] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:51 -0500] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:52 -0500] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:52 -0500] "GET /wp-mail.php HTTP/1.1" 403 1060 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:22:53 -0500] "GET /baxa1.phP8 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:53 -0500] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 209.145.62.177 - - [14/Jul/2025:01:22:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752474175.0132548809051513671875 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 154.16.169.80 - - [14/Jul/2025:01:22:54 -0500] "GET /.well-known/accah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:55 -0500] "GET /admin-post.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:55 -0500] "GET /conf_upload.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:56 -0500] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:56 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:22:57 -0500] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:57 -0500] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:22:58 -0500] "GET /wp-configs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:59 -0500] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:22:59 -0500] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:22:59 -0500] "GET /cgi-bin/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:00 -0500] "GET /f35.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:00 -0500] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:01 -0500] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:01 -0500] "GET /wp-admin/license.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:02 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:02 -0500] "GET /files.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:03 -0500] "GET /webadmin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:23:04 -0500] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:05 -0500] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:07 -0500] "GET /wsa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:23:07 -0500] "GET /wp-content/json.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:08 -0500] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:23:09 -0500] "GET /cgi-bin/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:10 -0500] "GET /woh.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:10 -0500] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:23:11 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:23:11 -0500] "GET /bless.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:12 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:13 -0500] "GET /info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:13 -0500] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:14 -0500] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:14 -0500] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:15 -0500] "GET /readme.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:16 -0500] "GET /wp-content/blue.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:16 -0500] "GET /packed.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:17 -0500] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:17 -0500] "GET /file/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:18 -0500] "GET /wp-admin/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:18 -0500] "GET /plugin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:19 -0500] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:19 -0500] "GET /wp-includes/Text/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:20 -0500] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:20 -0500] "GET /chosen.php?upload HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:20 -0500] "GET /load.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:21 -0500] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:22 -0500] "GET /edit-tags.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:22 -0500] "GET /wp-includes/rk2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:23 -0500] "GET /saka.phP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:23:23 -0500] "GET /lock.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:24 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:23:24 -0500] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:23:25 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:23:25 -0500] "GET /wordpress/wp-includes/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:25 -0500] "GET /templates/beez5/error.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:26 -0500] "GET /product.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:23:26 -0500] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:26 -0500] "GET /wp-content/item.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:23:27 -0500] "GET /wp-includes/plugin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:27 -0500] "GET /base.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:23:27 -0500] "GET /wp-content/mah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:27 -0500] "GET /zero.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:28 -0500] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 200 125843 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:28 -0500] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:28 -0500] "GET /.well-known/pki-validation/aurocuus.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:28 -0500] "GET /style.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:23:29 -0500] "GET /db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:23:29 -0500] "GET /wp-admin/options.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:30 -0500] "GET /wp-content/plugin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:30 -0500] "GET /wp-set.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:31 -0500] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:31 -0500] "GET /wp-includes/mah.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:32 -0500] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:32 -0500] "GET /images/images/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:32 -0500] "GET /wp-admin/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:23:33 -0500] "GET /assets/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:33 -0500] "GET /.well-known/bak.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:34 -0500] "GET /wp-admin/cong.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:34 -0500] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.80 - - [14/Jul/2025:01:23:34 -0500] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:34 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:35 -0500] "GET /Files/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:35 -0500] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:35 -0500] "GET /wp-content/uploads/aves.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:36 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:36 -0500] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:23:36 -0500] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:36 -0500] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:36 -0500] "GET /wp-admin/install.php HTTP/1.1" 403 6627 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:36 -0500] "GET /pages.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:38 -0500] "GET /bulk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:38 -0500] "GET /kk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:39 -0500] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:39 -0500] "GET /wp-logout.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:39 -0500] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:40 -0500] "GET /img/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:40 -0500] "GET /wp-includes/packed.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:41 -0500] "GET /wp-setup.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.80 - - [14/Jul/2025:01:23:41 -0500] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:41 -0500] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:42 -0500] "GET /wp-editor.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:42 -0500] "GET /wp-simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:42 -0500] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:43 -0500] "GET /.well-known/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:43 -0500] "GET /wp-includes/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:44 -0500] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:44 -0500] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:44 -0500] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:45 -0500] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:45 -0500] "GET /hehehehe.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:46 -0500] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:23:46 -0500] "GET /pgs.phP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:46 -0500] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.80 - - [14/Jul/2025:01:23:46 -0500] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:47 -0500] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:47 -0500] "GET /wp-admin/maint/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:47 -0500] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:48 -0500] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:48 -0500] "GET /header.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:49 -0500] "GET /gecko.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:49 -0500] "GET /Files/Mo0n.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:23:49 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:50 -0500] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:50 -0500] "GET /bk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:50 -0500] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:23:50 -0500] "GET /templates/beez3/error.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:51 -0500] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:51 -0500] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:51 -0500] "GET /wp-admin/maint/pongs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:23:52 -0500] "GET /wp-content/uploads/config.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:52 -0500] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:52 -0500] "GET /wp-includes/function.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:53 -0500] "GET /sym.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:53 -0500] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:23:53 -0500] "GET /wp-includes/images/votes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:23:54 -0500] "GET /wp-content/hello.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:54 -0500] "GET /wp-content/uploads/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:55 -0500] "GET /update/403.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:55 -0500] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:23:56 -0500] "GET /sk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:56 -0500] "GET /wp-content/x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:57 -0500] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:23:57 -0500] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:23:58 -0500] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:58 -0500] "GET /images/Marvins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:23:59 -0500] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:23:59 -0500] "GET /.well-known/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:23:59 -0500] "GET /images/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:00 -0500] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:01 -0500] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:01 -0500] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:01 -0500] "GET /wp-admin/user/network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:01 -0500] "GET /sys.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:02 -0500] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:24:02 -0500] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:02 -0500] "GET /wp-user.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:24:04 -0500] "GET /customize.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:24:04 -0500] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:06 -0500] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:06 -0500] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:07 -0500] "GET /fm1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:07 -0500] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:08 -0500] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:08 -0500] "GET /wp-settings.php HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:08 -0500] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:09 -0500] "GET /wp-file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:24:09 -0500] "GET /wp-content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:10 -0500] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:10 -0500] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:11 -0500] "GET /ioxi01.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:11 -0500] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:11 -0500] "GET /l/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:12 -0500] "GET /wp-includes/js/item.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.80 - - [14/Jul/2025:01:24:13 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:13 -0500] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:14 -0500] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:14 -0500] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:24:14 -0500] "GET /wp-content/wp-atom.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:15 -0500] "GET /wp-includes/mani.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:15 -0500] "GET /xx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:24:16 -0500] "GET /.well-known/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:16 -0500] "GET /css/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:17 -0500] "GET /.well-known/Ex34L.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:17 -0500] "GET /wp-admin/css/colors/room.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:18 -0500] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:18 -0500] "GET /randkeyword.PhP8 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.80 - - [14/Jul/2025:01:24:18 -0500] "GET /wp-includes/network.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:19 -0500] "GET /images.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:19 -0500] "GET /wp-aespa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:20 -0500] "GET /wp-includes/defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:20 -0500] "GET /cgi-bin/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:21 -0500] "GET /wp-admin/includes/doc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:24:22 -0500] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:22 -0500] "GET /.well-known/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:24:23 -0500] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:24:23 -0500] "GET /wp-content/product.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:24:24 -0500] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:24:24 -0500] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:24 -0500] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:25 -0500] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:26 -0500] "GET /wp-l0gin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:27 -0500] "GET /backup/sid.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:28 -0500] "GET /.well-known/bosctspi.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:24:28 -0500] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:29 -0500] "GET /.well-known/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:24:30 -0500] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:30 -0500] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:31 -0500] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:32 -0500] "GET /wp-admin/defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:33 -0500] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:24:34 -0500] "GET /images/worksec.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:34 -0500] "GET /images/rest.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:24:35 -0500] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:36 -0500] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:37 -0500] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:38 -0500] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:39 -0500] "GET /baxa1.phP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:40 -0500] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:41 -0500] "GET /.well-known/xoxo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:42 -0500] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:24:43 -0500] "GET /0x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:44 -0500] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:44 -0500] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:46 -0500] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:46 -0500] "GET /wpn.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:47 -0500] "GET /wp-content/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:47 -0500] "GET /cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:48 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:24:49 -0500] "GET /upload.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:24:50 -0500] "GET /init.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:52 -0500] "GET /wp-admin/users.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:58 -0500] "GET /wp-blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:24:59 -0500] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:25:00 -0500] "GET /wp-admin/images/module.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:25:01 -0500] "GET /wp-includes/radio.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:03 -0500] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:25:04 -0500] "GET /payout.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:06 -0500] "GET /lock360.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:25:08 -0500] "GET /x.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:25:10 -0500] "GET /wp_info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:11 -0500] "GET /wp-content/upload.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:12 -0500] "GET /xml.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:13 -0500] "GET /by.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:25:15 -0500] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:25:16 -0500] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:17 -0500] "GET /wp-admin/includes/users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:19 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:20 -0500] "GET /wp-admin/alfa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.80 - - [14/Jul/2025:01:25:21 -0500] "GET /wp-content/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:25:23 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:25:24 -0500] "GET /wp-includes/wp-class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:25 -0500] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:26 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:28 -0500] "GET /default.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:25:29 -0500] "GET /fox.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:25:30 -0500] "GET /google.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:31 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 409 1144 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:25:32 -0500] "GET /ovatools.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:33 -0500] "GET /sidwso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:25:34 -0500] "GET /worksec.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:25:35 -0500] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:36 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.80 - - [14/Jul/2025:01:25:37 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:38 -0500] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:39 -0500] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:40 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:25:41 -0500] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.80 - - [14/Jul/2025:01:25:42 -0500] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:43 -0500] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:44 -0500] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:25:46 -0500] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:47 -0500] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:49 -0500] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:25:50 -0500] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:25:51 -0500] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:51 -0500] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:25:52 -0500] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:25:52 -0500] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:52 -0500] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:25:53 -0500] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:25:53 -0500] "GET /Simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.80 - - [14/Jul/2025:01:25:54 -0500] "GET /wp-blog-header.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 209.145.62.177 - - [14/Jul/2025:01:25:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752474355.2915968894958496093750 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 154.16.169.80 - - [14/Jul/2025:01:25:54 -0500] "GET /style2.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:55 -0500] "GET /wp-scripts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:25:56 -0500] "GET /adminfuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:56 -0500] "GET /cjfuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.80 - - [14/Jul/2025:01:25:56 -0500] "GET /comfunctions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:57 -0500] "GET /delpaths.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.80 - - [14/Jul/2025:01:25:57 -0500] "GET /epinyins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:25:58 -0500] "GET /filefuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:25:58 -0500] "GET /hinfofuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:25:59 -0500] "GET /qfunctions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.80 - - [14/Jul/2025:01:25:59 -0500] "GET /qinfofuns.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:00 -0500] "GET /thoms.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:26:00 -0500] "GET /postnews.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:26:01 -0500] "GET /admin-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.80 - - [14/Jul/2025:01:26:01 -0500] "GET /link.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:26:02 -0500] "GET /ms-themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:03 -0500] "GET /my-sites.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:05 -0500] "GET /media.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:07 -0500] "GET /nav-menus.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.80 - - [14/Jul/2025:01:26:08 -0500] "GET /menu.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:26:10 -0500] "GET /options-head.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.80 - - [14/Jul/2025:01:26:11 -0500] "GET /revision.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.80 - - [14/Jul/2025:01:26:11 -0500] "GET /widgets.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:12 -0500] "GET /term.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:13 -0500] "GET /system_log.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:13 -0500] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:14 -0500] "GET /moded.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:14 -0500] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.80 - - [14/Jul/2025:01:26:15 -0500] "GET /wp-includes/images/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.80 - - [14/Jul/2025:01:26:15 -0500] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:16 -0500] "GET /upgrade.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:17 -0500] "GET /gh.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.80 - - [14/Jul/2025:01:26:17 -0500] "GET /version.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:26:18 -0500] "GET /head.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:19 -0500] "GET /index1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.225.33.18 - - [14/Jul/2025:01:26:19 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 154.16.169.94 - - [14/Jul/2025:01:26:19 -0500] "GET /theme-insqbzk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:20 -0500] "GET /good.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:26:21 -0500] "GET /main.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:21 -0500] "GET /wp-22.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:26:22 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:26:23 -0500] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:23 -0500] "GET /wsoyanz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.94 - - [14/Jul/2025:01:26:24 -0500] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:26:25 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.94 - - [14/Jul/2025:01:26:25 -0500] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:25 -0500] "GET /wp-admin/images/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:26 -0500] "GET /alfa-rex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:26 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:27 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:26:27 -0500] "GET /css/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:26:27 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:28 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:29 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:29 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:29 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:30 -0500] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:26:31 -0500] "GET /wp-includes/wso112233.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:31 -0500] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:32 -0500] "GET /.well-known/bala.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:26:32 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:33 -0500] "GET /wp-includes/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:33 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:26:34 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:34 -0500] "GET /wp-content/repeater.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:35 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:36 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:36 -0500] "GET /cache-compat.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:37 -0500] "GET /ajax-actions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:26:37 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.94 - - [14/Jul/2025:01:26:38 -0500] "GET /wp-consar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:26:38 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:26:39 -0500] "GET /alfanew.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:39 -0500] "GET /adminfuns.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:26:40 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:41 -0500] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:42 -0500] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:42 -0500] "GET /wp-content/style-css.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:43 -0500] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:26:43 -0500] "GET /chosen.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:44 -0500] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:26:44 -0500] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:26:45 -0500] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:45 -0500] "GET /cgi-bin/mariju.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:46 -0500] "GET /wp-includes/css/options.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:26:47 -0500] "GET /sx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:47 -0500] "GET /wp-content/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:48 -0500] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:49 -0500] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:26:49 -0500] "GET /update/gely.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:26:50 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:26:50 -0500] "GET /images/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:51 -0500] "GET /web.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:26:52 -0500] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.94 - - [14/Jul/2025:01:26:52 -0500] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:53 -0500] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 209.145.62.177 - - [14/Jul/2025:01:26:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752474415.3330430984497070312500 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 154.16.169.94 - - [14/Jul/2025:01:26:54 -0500] "GET /assets/images/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:26:55 -0500] "GET /wp-uploads-config.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:26:56 -0500] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:57 -0500] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:26:57 -0500] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:26:58 -0500] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:26:58 -0500] "GET /wp-admin/user/file.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:26:59 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:00 -0500] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:01 -0500] "GET /makeasmtp.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.94 - - [14/Jul/2025:01:27:02 -0500] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.94 - - [14/Jul/2025:01:27:03 -0500] "GET /wp-conflg.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:04 -0500] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:06 -0500] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:07 -0500] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:08 -0500] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:27:09 -0500] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:09 -0500] "GET /about.php?525 HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:27:11 -0500] "GET /indeex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:12 -0500] "GET /as.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:27:12 -0500] "GET /dropdown.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:13 -0500] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:27:14 -0500] "GET /wp-admin/images/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.94 - - [14/Jul/2025:01:27:15 -0500] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:16 -0500] "GET /admin.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:17 -0500] "GET /wp-content/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:17 -0500] "GET /buy.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:18 -0500] "GET /bs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:19 -0500] "GET /wp-admin/network/plugins.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:20 -0500] "GET /credits.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:21 -0500] "GET /edit-comments.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:21 -0500] "GET /checkbox.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:22 -0500] "GET /export.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.94 - - [14/Jul/2025:01:27:23 -0500] "GET /input.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:24 -0500] "GET /load-scripts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:25 -0500] "GET /load-styles.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:25 -0500] "GET /options-discussion.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:27:26 -0500] "GET /options-general.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:27 -0500] "GET /options-permalink.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.94 - - [14/Jul/2025:01:27:28 -0500] "GET /options-privacy.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:29 -0500] "GET /options-reading.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:29 -0500] "GET /options-writing.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:27:30 -0500] "GET /post-new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:31 -0500] "GET /privacy.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:32 -0500] "GET /profile.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:33 -0500] "GET /site-health.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:34 -0500] "GET /tools.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:35 -0500] "GET /update-core.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.94 - - [14/Jul/2025:01:27:36 -0500] "GET /user-edit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:37 -0500] "GET /user-new.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:27:38 -0500] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:38 -0500] "GET /bar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:39 -0500] "GET /samll.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:40 -0500] "GET /webdb.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:41 -0500] "GET /100.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:41 -0500] "GET /plugin-install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.94 - - [14/Jul/2025:01:27:42 -0500] "GET /km.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:43 -0500] "GET /LA.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:44 -0500] "GET /wp-good.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:45 -0500] "GET /wp-ldd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:27:46 -0500] "GET /sgd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:27:47 -0500] "GET /nf_tracking.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:48 -0500] "GET /wzy.php?action=door123 HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:49 -0500] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:50 -0500] "GET /ioxi002.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:51 -0500] "GET /chosen.php?p=\\u001b[0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:53 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:54 -0500] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:55 -0500] "GET /dropdown.php%5Cu001b%5B0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:56 -0500] "GET /wp-admin/user/about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:56 -0500] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:27:57 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:58 -0500] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:27:59 -0500] "GET /class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.94 - - [14/Jul/2025:01:27:59 -0500] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:00 -0500] "GET /Njima.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:01 -0500] "GET /ynz.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:28:02 -0500] "GET /index.php?3x=3x HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:03 -0500] "GET /wp-admin/network/class.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:04 -0500] "GET /.tmb/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.94 - - [14/Jul/2025:01:28:04 -0500] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.94 - - [14/Jul/2025:01:28:05 -0500] "GET /FroggBaba.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:06 -0500] "GET /admin.php%5Cu001b%5B0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:08 -0500] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:08 -0500] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:09 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:10 -0500] "GET /wp-includes/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.94 - - [14/Jul/2025:01:28:10 -0500] "GET /sts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:11 -0500] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:11 -0500] "GET /wp-admin/maint/users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:28:12 -0500] "GET /wp-content/install.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:12 -0500] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:13 -0500] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:13 -0500] "GET /st.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:14 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:28:15 -0500] "GET /about.php%5Cu001b%5B0m HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:28:15 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:16 -0500] "GET /GA13.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:17 -0500] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:18 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:18 -0500] "GET /wp-content/tmpls.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:19 -0500] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:20 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:28:21 -0500] "GET /about.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:21 -0500] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:28:22 -0500] "GET /crop.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:22 -0500] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:28:23 -0500] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:23 -0500] "GET /defaults.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:24 -0500] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:25 -0500] "GET /gali.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:28:26 -0500] "GET /wp-admin/wso.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:26 -0500] "GET /cache/i/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:27 -0500] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:28:28 -0500] "GET /dir.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:28 -0500] "GET /dirs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:29 -0500] "GET /abouts.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:28:30 -0500] "GET /malls.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:30 -0500] "GET /liefs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:31 -0500] "GET /uc.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:28:32 -0500] "GET /locks.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:32 -0500] "GET /wp-dsdd.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:33 -0500] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:33 -0500] "GET /css/bun.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.94 - - [14/Jul/2025:01:28:34 -0500] "GET /js/edit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.94 - - [14/Jul/2025:01:28:34 -0500] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:28:35 -0500] "GET /wp-themes.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:36 -0500] "GET /wp-uploads.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:36 -0500] "GET /wp-files.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:37 -0500] "GET /t.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:37 -0500] "GET /autoload_classmap.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:38 -0500] "GET /stindex.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:28:39 -0500] "GET /shop.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:39 -0500] "GET /test/test.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:39 -0500] "GET /exit.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:40 -0500] "GET /install.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:40 -0500] "GET /max.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:28:40 -0500] "GET /wp-load.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.94 - - [14/Jul/2025:01:28:41 -0500] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.94 - - [14/Jul/2025:01:28:41 -0500] "GET /aa.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:41 -0500] "GET /assets/images/cloud.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:42 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:42 -0500] "GET /worm3.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:43 -0500] "GET /shellv3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:43 -0500] "GET /sh.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:43 -0500] "GET /.well-known/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:44 -0500] "GET /cgi-bin/moon.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:44 -0500] "GET /cgi-bin/users.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:45 -0500] "GET /function.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:45 -0500] "GET /m.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.94 - - [14/Jul/2025:01:28:45 -0500] "GET /delete3.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:46 -0500] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:46 -0500] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:46 -0500] "GET /mm.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:28:47 -0500] "GET /cgi-bin/plugins.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:47 -0500] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:47 -0500] "GET /server.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:28:48 -0500] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:48 -0500] "GET /mailer.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:49 -0500] "GET /fm.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:49 -0500] "GET /phpzipincs.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:50 -0500] "GET /wp-blog.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:51 -0500] "GET /www.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.94 - - [14/Jul/2025:01:28:52 -0500] "GET /css/admin.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:53 -0500] "GET /css/wp-casper.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:54 -0500] "GET /cache.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:55 -0500] "GET /mah.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:56 -0500] "GET /cong.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:28:57 -0500] "GET /assets/dropdown.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:28:59 -0500] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:29:00 -0500] "GET /wp-header.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:01 -0500] "GET /shop.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:02 -0500] "GET /ioxi001.PhP7 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 209.145.62.177 - - [14/Jul/2025:01:29:05 -0500] "POST /wp-cron.php?doing_wp_cron=1752474545.0497438907623291015625 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 154.16.169.94 - - [14/Jul/2025:01:29:04 -0500] "GET /c.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:05 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:08 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:08 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:09 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:10 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:12 -0500] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:14 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:14 -0500] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:15 -0500] "GET /wp-admin/js/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:15 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:29:16 -0500] "GET /wp-content/upgrade/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:16 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:29:17 -0500] "GET /wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:17 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:17 -0500] "GET /wp-includes/ID3 HTTP/1.1" 301 241 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:17 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:29:18 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:18 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:19 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:19 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.94 - - [14/Jul/2025:01:29:19 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:19 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:20 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:20 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:20 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:21 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:21 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:22 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:22 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:29:23 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:23 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:24 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:24 -0500] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:24 -0500] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:25 -0500] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:25 -0500] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:26 -0500] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.94 - - [14/Jul/2025:01:29:26 -0500] "GET /upload/image/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:29:27 -0500] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:27 -0500] "GET /wordpress/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:28 -0500] "GET /blog/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:28 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:28 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 154.16.169.94 - - [14/Jul/2025:01:29:29 -0500] "GET /admin/editor/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:30 -0500] "GET /admin/images/slider/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:30 -0500] "GET /admin/tmp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.94 - - [14/Jul/2025:01:29:31 -0500] "GET /admin/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 154.16.169.94 - - [14/Jul/2025:01:29:31 -0500] "GET /Admin/uploads/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:32 -0500] "GET /admin/uploads/images/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:29:32 -0500] "GET /administrator/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:32 -0500] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:29:33 -0500] "GET /assets/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:33 -0500] "GET /cgi-bin/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:34 -0500] "GET /components/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:34 -0500] "GET /home/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:35 -0500] "GET /include/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:35 -0500] "GET /modules/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:36 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:36 -0500] "GET /mt/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:36 -0500] "GET /site/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:29:37 -0500] "GET /tmps/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:29:38 -0500] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:38 -0500] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:39 -0500] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:40 -0500] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:40 -0500] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:29:40 -0500] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:41 -0500] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:42 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:42 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.94 - - [14/Jul/2025:01:29:43 -0500] "GET /wp-content/languages/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:43 -0500] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:29:44 -0500] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 154.16.169.94 - - [14/Jul/2025:01:29:44 -0500] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:44 -0500] "GET /wp-includes/css/dist/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:45 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:46 -0500] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:46 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 154.16.169.94 - - [14/Jul/2025:01:29:47 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:47 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 154.16.169.94 - - [14/Jul/2025:01:29:47 -0500] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:29:48 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:48 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:49 -0500] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:49 -0500] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:49 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:50 -0500] "GET /cache-wordpress/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:50 -0500] "GET /cakil/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:29:50 -0500] "GET /cekidot/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:51 -0500] "GET /ubh/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:51 -0500] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:51 -0500] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:52 -0500] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:52 -0500] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:53 -0500] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:53 -0500] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 154.16.169.94 - - [14/Jul/2025:01:29:53 -0500] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:54 -0500] "GET /wp-content/plugins/db/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:29:54 -0500] "GET /wp-content/plugins/home/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:29:55 -0500] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 154.16.169.94 - - [14/Jul/2025:01:29:55 -0500] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:29:56 -0500] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:29:56 -0500] "GET /wp-content/plugins/random/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:56 -0500] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 154.16.169.94 - - [14/Jul/2025:01:29:57 -0500] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 154.16.169.94 - - [14/Jul/2025:01:29:57 -0500] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:57 -0500] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:29:58 -0500] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 154.16.169.94 - - [14/Jul/2025:01:29:58 -0500] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:59 -0500] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:29:59 -0500] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:00 -0500] "GET /wp-content/themes/alera/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:00 -0500] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:01 -0500] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:01 -0500] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 154.16.169.94 - - [14/Jul/2025:01:30:02 -0500] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:03 -0500] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:03 -0500] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 154.16.169.94 - - [14/Jul/2025:01:30:04 -0500] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 154.16.169.94 - - [14/Jul/2025:01:30:05 -0500] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 209.145.62.177 - - [14/Jul/2025:01:30:07 -0500] "POST /wp-cron.php?doing_wp_cron=1752474607.1093020439147949218750 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 154.16.169.94 - - [14/Jul/2025:01:30:06 -0500] "GET /admin/upload/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:07 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 154.16.169.94 - - [14/Jul/2025:01:30:07 -0500] "GET /up/.well-known/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 154.16.169.94 - - [14/Jul/2025:01:30:08 -0500] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 2600:3000:1511:200::85 - - [14/Jul/2025:01:40:21 -0500] "GET /.well-known/acme-challenge/gSJBpJZryl3JQoX0O3nt8lZJKmnadTuQte13-iQusa0 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 178.128.226.2 - - [14/Jul/2025:01:45:58 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0" 77.238.103.98 - - [14/Jul/2025:01:48:59 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.250 - - [14/Jul/2025:01:59:29 -0500] "GET /robots.txt HTTP/1.1" 200 114 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 2001:470:36:3a2:7132:39e5:b8b7:b2de - - [14/Jul/2025:02:01:07 -0500] "POST /xmlrpc.php HTTP/1.1" 200 225 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 46.252.192.49 - - [14/Jul/2025:02:07:00 -0500] "GET /index.php HTTP/1.1" 301 - "-" "-" 46.252.192.49 - - [14/Jul/2025:02:07:01 -0500] "GET /index.html HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [14/Jul/2025:02:07:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752476875.1086308956146240234375 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 188.166.236.28 - - [14/Jul/2025:02:07:54 -0500] "GET / HTTP/1.1" 301 - "https://copycode.me//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 216.244.66.250 - - [14/Jul/2025:02:10:03 -0500] "GET /14-ways-laravel-can-help-you-reach-your-development-goals/ HTTP/1.1" 200 35837 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 13.73.207.230 - - [14/Jul/2025:02:12:15 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:16 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:17 -0500] "GET /file.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:18 -0500] "GET /file.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:19 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:20 -0500] "GET /moon.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:21 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:22 -0500] "GET /admin.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:23 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:23 -0500] "GET /radio.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:24 -0500] "GET /log.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:25 -0500] "GET /log.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:26 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:27 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:27 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:28 -0500] "GET /wp-includes/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:29 -0500] "GET /wp-includes/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:30 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:30 -0500] "GET /simple.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:31 -0500] "GET /about.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:32 -0500] "GET /about.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:33 -0500] "GET /404.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:33 -0500] "GET /404.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:34 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:35 -0500] "GET /admin/function.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:36 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:36 -0500] "GET /wp-includes/assets/about.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:37 -0500] "GET /wp-includes/assets/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:38 -0500] "GET /wp-includes/assets/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:39 -0500] "GET /info.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:40 -0500] "GET /info.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:41 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:41 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:42 -0500] "GET /config.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:43 -0500] "GET /config.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:44 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:44 -0500] "GET /wp-admin/js/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:46 -0500] "GET /fm.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:46 -0500] "GET /fm.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:48 -0500] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:48 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:50 -0500] "GET /ty.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:50 -0500] "GET /ty.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:51 -0500] "GET /wp-includes/assets/admin.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:52 -0500] "GET /wp-includes/assets/admin.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:53 -0500] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:54 -0500] "GET /wp-includes/fonts/admin.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:55 -0500] "GET /403.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:55 -0500] "GET /403.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:56 -0500] "GET /as.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:57 -0500] "GET /as.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:58 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:58 -0500] "GET /wp-includes/Text/network.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:12:59 -0500] "GET /index/function.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:00 -0500] "GET /index/function.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:01 -0500] "GET /wp-content/themes/include.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:02 -0500] "GET /wp-content/themes/include.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:04 -0500] "GET /alfa.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:05 -0500] "GET /alfa.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:07 -0500] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:07 -0500] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:08 -0500] "GET /css.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:09 -0500] "GET /css.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:10 -0500] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:10 -0500] "GET /wp-content/themes/plugin.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:11 -0500] "GET /wp-admin/includes/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:12 -0500] "GET /wp-admin/includes/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:13 -0500] "GET /index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:14 -0500] "GET /classwithtostring.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:15 -0500] "GET /classwithtostring.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:16 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:16 -0500] "GET /autoload_classmap.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:17 -0500] "GET /item.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:18 -0500] "GET /item.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:19 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:19 -0500] "GET /ini.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:20 -0500] "GET /default.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:21 -0500] "GET /default.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:22 -0500] "GET /wp-admin/network/about.php HTTP/1.1" 302 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:25 -0500] "GET /ok.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:25 -0500] "GET /ok.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:26 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:27 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:28 -0500] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:28 -0500] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:29 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:30 -0500] "GET /inputs.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:31 -0500] "GET /1.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:31 -0500] "GET /1.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:32 -0500] "GET /infoo.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:33 -0500] "GET /infoo.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:34 -0500] "GET /cong.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:34 -0500] "GET /cong.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:35 -0500] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:36 -0500] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:37 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:37 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:38 -0500] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:39 -0500] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:40 -0500] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:40 -0500] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:41 -0500] "GET /wp-content/themes/index.php HTTP/1.1" 200 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:41 -0500] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:42 -0500] "GET /wp-includes/css/dist/preferences/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:43 -0500] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:43 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:44 -0500] "GET /wp-content/index.php HTTP/1.1" 200 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:45 -0500] "GET /css/colors/blue/atomlib.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:45 -0500] "GET /css/colors/blue/atomlib.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:46 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:47 -0500] "GET /wp-admin/maint/about.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:48 -0500] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:48 -0500] "GET /wp-includes/assets/themes.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:49 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:50 -0500] "GET /shell.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:51 -0500] "GET /install.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:51 -0500] "GET /install.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:52 -0500] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:53 -0500] "GET /wp-content/languages/chosen.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:54 -0500] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:55 -0500] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:56 -0500] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:56 -0500] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:57 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:58 -0500] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:13:59 -0500] "GET /wp-content/packed.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:00 -0500] "GET /wp-content/packed.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:01 -0500] "GET /assets/images/doc.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:01 -0500] "GET /assets/images/doc.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:03 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:04 -0500] "GET /wp.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:05 -0500] "GET /wp-content/themes/file.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:06 -0500] "GET /wp-content/themes/file.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:07 -0500] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:07 -0500] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:08 -0500] "GET /m.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:09 -0500] "GET /m.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:10 -0500] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:10 -0500] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:11 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:12 -0500] "GET /themes.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:13 -0500] "GET /manager.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:13 -0500] "GET /manager.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:14 -0500] "GET /x.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:15 -0500] "GET /x.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:16 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:16 -0500] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:17 -0500] "GET /muse.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:18 -0500] "GET /muse.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:19 -0500] "GET /alfa-rex2.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:19 -0500] "GET /alfa-rex2.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:20 -0500] "GET /wp-content/uploads/json.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:21 -0500] "GET /wp-content/uploads/json.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:22 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:22 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:23 -0500] "GET /post.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:24 -0500] "GET /post.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:25 -0500] "GET /cgi-bin/upfile.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:25 -0500] "GET /cgi-bin/upfile.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:26 -0500] "GET /wp-content/uploads/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:26 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:27 -0500] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:28 -0500] "GET /wp-admin/user/chosen.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:29 -0500] "GET /news.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:29 -0500] "GET /news.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:30 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:31 -0500] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:32 -0500] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:32 -0500] "GET /wp-content/uploads/2024/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:33 -0500] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:34 -0500] "GET /wp-includes/images/smilies/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:35 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:36 -0500] "GET /plugins.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:37 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:37 -0500] "GET /chosen.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:38 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:39 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:40 -0500] "GET /images/admin.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:41 -0500] "GET /images/admin.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:42 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:42 -0500] "GET /edit.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:43 -0500] "GET /wp-admin/user/admin.php HTTP/1.1" 302 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:46 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:46 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19036 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:47 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:48 -0500] "GET /makeasmtp.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:49 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:49 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:50 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:51 -0500] "GET /wp-admin/network/chosen.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:52 -0500] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:52 -0500] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 404 18401 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:53 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:54 -0500] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 18401 "-" "-" 209.145.62.177 - - [14/Jul/2025:02:14:55 -0500] "POST /wp-cron.php?doing_wp_cron=1752477295.4336130619049072265625 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 13.73.207.230 - - [14/Jul/2025:02:14:55 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:55 -0500] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 18399 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:56 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:59 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:14:59 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19035 "-" "-" 13.73.207.230 - - [14/Jul/2025:02:15:00 -0500] "GET /wp-admin/yindu.php HTTP/1.1" 301 - "-" "-" 13.73.207.230 - - [14/Jul/2025:02:15:01 -0500] "GET /wp-admin/yindu.php HTTP/1.1" 404 18399 "-" "-" 57.159.27.85 - - [14/Jul/2025:02:30:11 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:17 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19035 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:23 -0500] "GET /.well-known/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:29 -0500] "GET /.well-known/ HTTP/1.1" 404 19035 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:36 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:40 -0500] "GET /sites/default/files/ HTTP/1.1" 404 19036 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:48 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:30:53 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 19036 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:31:00 -0500] "GET /uploads/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:31:05 -0500] "GET /uploads/ HTTP/1.1" 404 19035 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:31:12 -0500] "GET /images/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:31:17 -0500] "GET /images/ HTTP/1.1" 404 19035 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:31:23 -0500] "GET /files/ HTTP/1.1" 301 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 57.159.27.85 - - [14/Jul/2025:02:31:31 -0500] "GET /files/ HTTP/1.1" 404 19035 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.153.122.30 - - [14/Jul/2025:02:41:54 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2600:3000:2710:200::86 - - [14/Jul/2025:02:45:23 -0500] "GET /.well-known/acme-challenge/EwPoUF-V7EjDXA8I5ugXEOFrWw7maH8xNYE-IpVszyM HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 4.227.36.46 - - [14/Jul/2025:02:50:18 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)"