![]() Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/corals/access-logs/ |
2600:3000:2710:200::84 - - [12/Jul/2025:07:25:20 -0500] "GET /.well-known/acme-challenge/sB_Q1FarGkpSFc29mTbZY1TNGDoW1sbgli6rxGWNL-8 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 115.78.7.179 - - [12/Jul/2025:08:00:52 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 176.126.103.148 - - [12/Jul/2025:08:01:08 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 176.126.103.148 - - [12/Jul/2025:08:01:11 -0500] "GET /Read%20more%20about%20Vue.js%20/%20Nuxt HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 176.126.103.148 - - [12/Jul/2025:08:01:13 -0500] "GET /Read%20more%20about%20Vue.js%20/%20Nuxt HTTP/1.1" 404 19036 "http://corals.io/Read%20more%20about%20Vue.js%20/%20Nuxt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 176.126.103.148 - - [12/Jul/2025:08:01:17 -0500] "GET /wp-content/plugins/revslider/public/js/sr7.js?ver=6.7.23 HTTP/1.1" 200 91007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" 176.126.103.148 - - [12/Jul/2025:08:01:20 -0500] "GET /Vue.js%20/%20Nuxt HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 176.126.103.148 - - [12/Jul/2025:08:01:21 -0500] "GET /Vue.js%20/%20Nuxt HTTP/1.1" 404 19036 "http://corals.io/Vue.js%20/%20Nuxt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 176.126.103.148 - - [12/Jul/2025:08:01:26 -0500] "GET /wp-content/plugins/revslider/public/js/libs/tptools.js?ver=6.7.23 HTTP/1.1" 200 74536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 176.126.103.148 - - [12/Jul/2025:08:01:27 -0500] "GET /Read%20more%20about%20Node.js HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 176.126.103.148 - - [12/Jul/2025:08:01:28 -0500] "GET /Read%20more%20about%20Node.js HTTP/1.1" 404 19036 "http://corals.io/Read%20more%20about%20Node.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 176.126.103.148 - - [12/Jul/2025:08:01:36 -0500] "GET /Node.js HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 176.126.103.148 - - [12/Jul/2025:08:01:37 -0500] "GET /Node.js HTTP/1.1" 404 19036 "http://corals.io/Node.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36" 196.251.84.110 - - [12/Jul/2025:08:02:19 -0500] "POST / HTTP/1.1" 200 44600 "-" "-" 2600:3000:1511:200::82 - - [12/Jul/2025:08:30:20 -0500] "GET /.well-known/acme-challenge/K5yB69VRFgeE0TWqJM5mytQu1VjkFpOvcGIpnbj04tk HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 43.159.152.4 - - [12/Jul/2025:08:49:38 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.222.253.14 - - [12/Jul/2025:08:59:01 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 170.39.218.50 - - [12/Jul/2025:09:03:25 -0500] "GET /wp-content/plugins/revslider/public/js/sr7.js?ver=6.7.23 HTTP/1.1" 200 91007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/121.0.0.0" 51.68.107.151 - - [12/Jul/2025:09:07:47 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 43.143.60.88 - - [12/Jul/2025:09:27:55 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:27:55 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:28:16 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:28:22 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:28:25 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:28:35 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 216.244.66.250 - - [12/Jul/2025:09:35:15 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected])" 2600:3000:1511:200::84 - - [12/Jul/2025:09:35:22 -0500] "GET /.well-known/acme-challenge/FA0NwnnYzj0xWjU_0PJcU4oEs56Pbxq4uCVpSiLAzh4 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 43.143.60.88 - - [12/Jul/2025:09:39:24 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:39:24 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 43.143.60.88 - - [12/Jul/2025:09:39:25 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:08 -0500] "GET /filefuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:08 -0500] "GET /qinfofuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:09 -0500] "GET /tempfuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:10 -0500] "GET /comdofuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:10 -0500] "GET /userfuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:11 -0500] "GET /hinfofuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:11 -0500] "GET /onclickfuns.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:12 -0500] "GET /chtmlfuns.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:13 -0500] "GET /bugz.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:13 -0500] "GET /makeasmtp.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:14 -0500] "GET /wp-mini.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:15 -0500] "GET /wp-includes/sitemaps/providers/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:15 -0500] "GET /wp-admin/css/colors/coffee/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:16 -0500] "GET /cgi-bin/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:17 -0500] "GET /wp-includes/IXR/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:17 -0500] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:18 -0500] "GET /images/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:19 -0500] "GET /wp-includes/php-compat/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:19 -0500] "GET /wp-admin/maint/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:20 -0500] "GET /wp-includes/ID3/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:20 -0500] "GET /wp-admin/includes/mariju.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:21 -0500] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:22 -0500] "GET /wp-seo.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:22 -0500] "GET /cong.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:23 -0500] "GET /ioxi-rex.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:24 -0500] "GET /.well-known/warm.PhP7 HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:24 -0500] "GET /.tmb/warm.PhP7 HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:25 -0500] "GET /alfa.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:26 -0500] "GET /plugin.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:26 -0500] "GET /alfa2.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:27 -0500] "GET /alfa-priv.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:28 -0500] "GET /wp-content/alfa.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:28 -0500] "GET /wp-admin/alfa.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:29 -0500] "GET /wp-include/alfa.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:30 -0500] "GET /st.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:30 -0500] "GET /f77.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:31 -0500] "GET /autoload_classmap.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:32 -0500] "GET /chosen.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:33 -0500] "GET /wp-content/wp-apxupx.php?apx=upx HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:33 -0500] "GET /wp-content/plugins/wp-apxupx.php?apx=upx HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:34 -0500] "GET /nice.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:35 -0500] "GET /log.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:35 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:36 -0500] "GET /class.api.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:37 -0500] "GET /wp-admin/js/widgets/class.api.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:38 -0500] "GET /wp-admin/images/class.api.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:38 -0500] "GET /maint/class.api.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:39 -0500] "GET /wp-admin/network/class_api.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:40 -0500] "GET /wp-content/languages/themes/class_api.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:41 -0500] "GET /wp-admin/includes/class_api.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:41 -0500] "GET /cgi-bin/class_api.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:42 -0500] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:43 -0500] "GET /images/class.api.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:43 -0500] "GET /dropdown.php HTTP/1.1" 403 6627 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:44 -0500] "GET /cong.php HTTP/1.1" 403 6627 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:45 -0500] "GET /wp-includes/images/themes.php HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:46 -0500] "GET /wp-includes/widgets/themes.php HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:46 -0500] "GET /wp-includes/ID3/themes.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:47 -0500] "GET /wp-admin/css/themes.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:48 -0500] "GET /wp-includes/sodium_compat/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:49 -0500] "GET /wp-includes/style-engine/themes.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:49 -0500] "GET /wp-includes/PHPMailer/themes.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:50 -0500] "GET /.well-known/pki-validation/themes.php HTTP/1.1" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:51 -0500] "GET /wp-includes/sitemaps/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:51 -0500] "GET /wp-includes/blocks/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:52 -0500] "GET /homeroot.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:53 -0500] "GET /defaults.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:54 -0500] "GET /function.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:54 -0500] "GET /old/function.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:55 -0500] "GET /mah/function.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:56 -0500] "GET /mini.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:56 -0500] "GET /.well-known/pki-validation/x.php HTTP/1.1" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:57 -0500] "GET /b0.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:58 -0500] "GET /atomlib.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:58 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:44:59 -0500] "GET /million.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:00 -0500] "GET /ioxi2.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:00 -0500] "GET /4pric.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:01 -0500] "GET /wp-content/style-css.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:02 -0500] "GET /yanz HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:02 -0500] "GET /menu HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:03 -0500] "GET /mailer.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:04 -0500] "GET /leaf-mailer.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:04 -0500] "GET /wp-includes.bak/random_compat/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:05 -0500] "GET /ty.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:06 -0500] "GET /wp-includes/Text/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:07 -0500] "GET /wp-content/upgrade/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:07 -0500] "GET /.tmb/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:08 -0500] "GET /wp-content/upgrade-temp-backup/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:09 -0500] "GET /wp-content/cache/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:09 -0500] "GET /wp-includes/random_compat/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:10 -0500] "GET /cgi-bin/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:11 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:11 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:12 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:13 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:13 -0500] "GET /img/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:14 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:15 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:15 -0500] "GET /wp-content/plugins/upload/up.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:16 -0500] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:17 -0500] "GET /site/wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:17 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:18 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:19 -0500] "GET /oxi-rex.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:19 -0500] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:20 -0500] "GET /updates.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:21 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:21 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:22 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:23 -0500] "GET /ok.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:23 -0500] "GET /ccx/index.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:24 -0500] "GET /wp-2019.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:25 -0500] "GET /class-IXR-date.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:25 -0500] "GET /configNRB/admin.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:26 -0500] "GET /dropdown.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:27 -0500] "GET /wp-content/dropdown.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:27 -0500] "GET /wp-includes/dropdown.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:28 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:29 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:29 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:30 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:31 -0500] "GET /wp-atom.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:32 -0500] "GET /fw.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:32 -0500] "GET /lock.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:33 -0500] "GET /wp-content/product.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:34 -0500] "GET /wp-content/index.php?x=ooo HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:34 -0500] "GET /0x1949.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:35 -0500] "GET /wp-login.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:36 -0500] "GET /wp-manage0.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:36 -0500] "GET /simple.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:37 -0500] "GET /link.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:38 -0500] "GET /shell20211028.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:38 -0500] "GET /.well-known/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:39 -0500] "GET /index.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:40 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:40 -0500] "GET /ALFA_DATA/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:41 -0500] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:42 -0500] "GET /css/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:42 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:43 -0500] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:44 -0500] "GET /wp-admin/network/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:44 -0500] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:45 -0500] "GET /wp-content/ HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:46 -0500] "GET /wp-content/patior/ HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:46 -0500] "GET /wp-admin/maint/moon.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:47 -0500] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:48 -0500] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:48 -0500] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:49 -0500] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:50 -0500] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:51 -0500] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:51 -0500] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:52 -0500] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:53 -0500] "GET /.well-known/admin.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:53 -0500] "GET /.well-known/acme-challenge/wp-signup.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:54 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:55 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:55 -0500] "GET /wp-includes/block-supports/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:56 -0500] "GET /wp-admin/images/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:57 -0500] "GET /wp-includes/js/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:57 -0500] "GET /wp-includes/pomo/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:58 -0500] "GET /wp-content/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:59 -0500] "GET /wp-includes/css/themes.php%20 HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:45:59 -0500] "GET /wp-admin/js/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:00 -0500] "GET /wp-includes/rest-api/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:01 -0500] "GET /wp-admin/maint/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:01 -0500] "GET /wp-includes/Requests/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:02 -0500] "GET /wp-content/fonts/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:03 -0500] "GET /wp-content/themes/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:03 -0500] "GET /wp-includes/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:04 -0500] "GET /wp-content/backups-dup-lite/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:05 -0500] "GET /wp-content/uploads/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:05 -0500] "GET /wp-includes/theme-compat/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:06 -0500] "GET /wp-content/updraft/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:07 -0500] "GET /css/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:08 -0500] "GET /wp-admin/includes/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:08 -0500] "GET /wp-includes/certificates/themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:09 -0500] "GET /wp-content/plugins/yyobang/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:10 -0500] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:10 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:11 -0500] "GET /fm1.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:12 -0500] "GET /wp-content/themes/finley/min.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:12 -0500] "GET /wp-head.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:13 -0500] "GET /.well-known/index.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:14 -0500] "GET /goods.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:14 -0500] "GET /function/function.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:15 -0500] "GET /index/function.php HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:16 -0500] "GET /users.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:16 -0500] "GET /classwithtostring.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:17 -0500] "GET /alfanew.PHP7 HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:18 -0500] "GET /ms.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:18 -0500] "GET /msl.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:19 -0500] "GET /plugin.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:20 -0500] "GET /wp-configs.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:20 -0500] "GET /content.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:21 -0500] "GET /obfs.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:22 -0500] "GET /options-reading.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:22 -0500] "GET /ms-sites.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:23 -0500] "GET /edit-form-advanced.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:24 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:24 -0500] "GET /admin.php?p= HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:25 -0500] "GET /radio.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:26 -0500] "GET /themes.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:26 -0500] "GET /wp-content/plugins/w0rdpr3ssnew/about.phpp HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:27 -0500] "GET /wp-content/plugins/w0rdpr3ssnew/wp-login.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:28 -0500] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:28 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:29 -0500] "GET /index.php?3x=3x HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:30 -0500] "GET /weso.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:30 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:31 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:32 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:32 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:33 -0500] "GET /images/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:34 -0500] "GET /images/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:34 -0500] "GET /m4r1ju4n4.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:36 -0500] "GET /marijuana.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 138.199.60.166 - - [12/Jul/2025:09:46:38 -0500] "GET /wp-admin/css/colors/coffee/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:39 -0500] "GET /wp-admin/css/colors/coffee/marijuana.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:41 -0500] "GET /wp-admin/css/colors/maro.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:42 -0500] "GET /wp-admin/css/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:44 -0500] "GET /wp-content/plugins/owfsmac/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:45 -0500] "GET /wp-admin/css/maro.php HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:47 -0500] "GET /wp-admin/includes/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:49 -0500] "GET /wp-admin/maint/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:50 -0500] "GET /wp-admin/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:52 -0500] "GET /wp-content/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:54 -0500] "GET /wp-content/plugins/aryabot/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:55 -0500] "GET /wp-content/plugins/aryabot/mar.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:57 -0500] "GET /wp-content/plugins/owfsmac/maro.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:46:58 -0500] "GET /wp-includes/mari.php HTTP/1.1" 403 6629 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 149.88.23.89 - - [12/Jul/2025:09:47:00 -0500] "GET /alfa-rex.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.146.12.176 - - [12/Jul/2025:10:32:52 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 2600:3000:1511:200::82 - - [12/Jul/2025:10:40:22 -0500] "GET /.well-known/acme-challenge/ADe2hpvRjs8ZpXOcHYU8U_w_A363TScjN4LUUDnObsc HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 35.215.85.202 - - [12/Jul/2025:10:51:24 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 43.159.145.153 - - [12/Jul/2025:11:31:33 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.245.233.30 - - [12/Jul/2025:11:40:58 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2600:3000:2710:200::82 - - [12/Jul/2025:11:45:21 -0500] "GET /.well-known/acme-challenge/clHFFUxg4eK0YvkvgrBMqZK4TaFol6C3-vu4b_7LbSI HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 196.251.84.110 - - [12/Jul/2025:11:58:37 -0500] "POST / HTTP/1.1" 200 44600 "-" "-" 185.177.72.104 - - [12/Jul/2025:12:00:02 -0500] "GET /.git/config HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.104 - - [12/Jul/2025:12:00:03 -0500] "GET /.git/config HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.36.108.93 - - [12/Jul/2025:12:16:29 -0500] "GET / HTTP/1.1" 301 - "http://corals.io/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 196.251.84.110 - - [12/Jul/2025:12:32:02 -0500] "GET /.env HTTP/1.1" 301 - "-" "-" 196.251.84.110 - - [12/Jul/2025:12:32:07 -0500] "POST / HTTP/1.1" 200 44600 "-" "-" 8.28.99.87 - - [12/Jul/2025:12:33:56 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 212.147.5.172 - - [12/Jul/2025:12:35:00 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7313 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 66.249.74.161 - - [12/Jul/2025:12:38:55 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.73.97 - - [12/Jul/2025:12:38:56 -0500] "GET /ads.txt HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.74.161 - - [12/Jul/2025:12:38:56 -0500] "GET /ads.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2600:3000:2710:200::81 - - [12/Jul/2025:12:50:20 -0500] "GET /.well-known/acme-challenge/K6X3rsVkVbZA0PzCmFH-uVvnXCJ0yM-P0iH9jAlY5tM HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 196.251.115.37 - - [12/Jul/2025:13:15:20 -0500] "GET /.env HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 196.251.115.37 - - [12/Jul/2025:13:15:21 -0500] "POST / HTTP/1.1" 200 44600 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2600:3000:2710:200::83 - - [12/Jul/2025:13:55:20 -0500] "GET /.well-known/acme-challenge/dQA3mJ-PJq5Nw4ObW1-LS1TdZbGscTELrqj54yhWY-E HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 18.177.5.124 - - [12/Jul/2025:14:03:58 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 66.249.74.163 - - [12/Jul/2025:14:23:37 -0500] "GET / HTTP/1.1" 301 - "-" "GoogleOther" 185.177.72.12 - - [12/Jul/2025:14:31:40 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.152.248.226 - - [12/Jul/2025:14:58:12 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2600:3000:1511:200::82 - - [12/Jul/2025:15:00:22 -0500] "GET /.well-known/acme-challenge/5o-WMfqqXeXmNZLyVAmX_A62Qq1nzJ1OoUGxgy81ezc HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 84.239.41.15 - - [12/Jul/2025:15:18:51 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.177.72.202 - - [12/Jul/2025:15:25:58 -0500] "GET /.git/HEAD HTTP/1.1" 301 - "-" "-" 185.177.72.202 - - [12/Jul/2025:15:26:03 -0500] "GET /.aws/config HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 150.109.46.88 - - [12/Jul/2025:15:41:49 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2600:3000:1511:200::84 - - [12/Jul/2025:16:05:24 -0500] "GET /.well-known/acme-challenge/XqdgP5LGxk2F6oT4A4mRmjCbquJyhXekJnu8esFGhW0 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 164.138.220.142 - - [12/Jul/2025:16:30:51 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 4.227.36.63 - - [12/Jul/2025:16:52:03 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)" 2600:3000:1511:200::85 - - [12/Jul/2025:17:10:21 -0500] "GET /.well-known/acme-challenge/I0iHqJqx8KI0I58mE3n72EQ3UEtbZUcTZDNAkrm1M9A HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 2607:a400:5:81::2 - - [12/Jul/2025:17:12:33 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 2607:a400:5:81::4 - - [12/Jul/2025:17:12:34 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 209.145.62.177 - - [12/Jul/2025:17:22:53 -0500] "POST /wp-cron.php?doing_wp_cron=1752358973.0203649997711181640625 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 103.131.71.24 - - [12/Jul/2025:17:22:52 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 3.107.91.228 - - [12/Jul/2025:17:23:37 -0500] "HEAD / HTTP/1.1" 301 - "-" "curl/7.88.1" 3.107.91.228 - - [12/Jul/2025:17:23:46 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" 110.172.98.2 - - [12/Jul/2025:17:33:27 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:01 -0500] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:11 -0500] "GET /akc.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:20 -0500] "GET /akp.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:24 -0500] "GET /admin.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:30 -0500] "GET /about.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:35 -0500] "GET /edit-tags.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:34:39 -0500] "GET /file5.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.73.98 - - [12/Jul/2025:17:34:46 -0500] "GET /wp-content/plugins/the7-block-editor/dist/editor/blocks/navigation/responsiveness/common.js?ver=5bc89c75120ae5159676 HTTP/1.1" 200 - "https://www.corals.io/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.7151.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 2602:fb54:39b:: - - [12/Jul/2025:17:34:52 -0500] "GET /ava.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:35:03 -0500] "GET /ton.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:35:17 -0500] "GET /wp-admin/admin-wolf.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:17:35:30 -0500] "GET /wp-content/plugins/erinyani/asix.php HTTP/1.1" 403 6630 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:372:: - - [12/Jul/2025:17:43:41 -0500] "GET /style.php HTTP/1.1" 403 6630 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2001:1600:10:100::540 - - [12/Jul/2025:18:07:02 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.3260.1717 Mobile Safari/537.36" 2001:1600:10:100::540 - - [12/Jul/2025:18:07:05 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 18402 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.3260.1717 Mobile Safari/537.36" 2600:3000:1511:200::84 - - [12/Jul/2025:18:15:21 -0500] "GET /.well-known/acme-challenge/9BQZUwABRekQTfaHd0waV4HrkhCtqFFhDVvRdJLIxmk HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 2001:470:36:3a2:7132:39e5:b8b7:b2de - - [12/Jul/2025:18:16:16 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 194.36.108.93 - - [12/Jul/2025:18:51:10 -0500] "GET / HTTP/1.1" 301 - "http://corals.io/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.157.180.116 - - [12/Jul/2025:18:51:31 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2602:fb54:39b:: - - [12/Jul/2025:19:02:06 -0500] "GET /wp-content/plugins/yanierin/akc.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:13 -0500] "GET /akc.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:19 -0500] "GET /akp.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:25 -0500] "GET /admin.php HTTP/1.1" 403 6627 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:31 -0500] "GET /about.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:35 -0500] "GET /edit-tags.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:43 -0500] "GET /file5.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:48 -0500] "GET /ava.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:51 -0500] "GET /ton.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:02:55 -0500] "GET /wp-admin/admin-wolf.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2602:fb54:39b:: - - [12/Jul/2025:19:03:00 -0500] "GET /wp-content/plugins/erinyani/asix.php HTTP/1.1" 403 6628 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2600:3000:1511:200::85 - - [12/Jul/2025:19:20:24 -0500] "GET /.well-known/acme-challenge/7wzs24GGGAEOs0NtiWYcPB5hlPPfc2sILuHOArt-TcQ HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 193.95.53.131 - - [12/Jul/2025:20:06:35 -0500] "GET /wp-json/wp/v2/posts HTTP/1.1" 200 26311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 92.205.212.113 - - [12/Jul/2025:20:06:43 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 75.119.208.120 - - [12/Jul/2025:20:15:02 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 2600:3000:1511:200::82 - - [12/Jul/2025:20:25:21 -0500] "GET /.well-known/acme-challenge/C2V1MNuaNhuN3dJ9Jw3npD8NYH-JRcr88Q7cVdiSkl8 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 51.68.236.94 - - [12/Jul/2025:20:34:39 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.94 - - [12/Jul/2025:20:35:52 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.94 - - [12/Jul/2025:20:36:04 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.94 - - [12/Jul/2025:20:36:54 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.94 - - [12/Jul/2025:20:36:57 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.94 - - [12/Jul/2025:20:36:59 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.94 - - [12/Jul/2025:20:37:28 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 54.36.148.213 - - [12/Jul/2025:20:59:46 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 198.235.24.168 - - [12/Jul/2025:21:10:44 -0500] "GET / HTTP/1.1" 301 - "-" "-" 2600:3000:1511:200::82 - - [12/Jul/2025:21:30:21 -0500] "GET /.well-known/acme-challenge/s85PeJavxe0hWEBKFduBpllkhW6bwHG1w_jbSTDxuKo HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 74.208.168.254 - - [12/Jul/2025:22:09:48 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 51.91.105.134 - - [12/Jul/2025:22:14:24 -0500] "POST /wp-login.php HTTP/1.1" 302 - "http://corals.io" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.134 Safari/537.36" 2a01:4f9:c011:4882::1 - - [12/Jul/2025:22:18:29 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.203.198.250 - - [12/Jul/2025:22:24:09 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 43.128.67.187 - - [12/Jul/2025:22:29:18 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.177.72.104 - - [12/Jul/2025:22:30:33 -0500] "GET /.git/HEAD HTTP/1.1" 404 19036 "-" "-" 185.177.72.104 - - [12/Jul/2025:22:30:35 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.233.93.24 - - [12/Jul/2025:22:32:13 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 2600:3000:1511:200::82 - - [12/Jul/2025:22:35:23 -0500] "GET /.well-known/acme-challenge/YMfNCc_7ZO883jx3ax-6JMns5P-hYu6VD2qTAAR6pjs HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 2400:6180:100:d0::845:2001 - - [12/Jul/2025:22:49:41 -0500] "POST /wp-login.php HTTP/1.1" 302 - "http://corals.io" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 8.218.212.177 - - [12/Jul/2025:23:25:17 -0500] "POST /wp-login.php HTTP/1.1" 302 - "http://corals.io" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0" 146.19.215.118 - - [12/Jul/2025:23:35:25 -0500] "GET /style.php HTTP/1.1" 403 6628 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2600:3000:2710:200::82 - - [12/Jul/2025:23:40:22 -0500] "GET /.well-known/acme-challenge/nQmQpyfDxQIx8iemCnNc7rT_EYkPFAGN38IP3i0UHj8 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 2a01:4f9:c012:94bf::1 - - [13/Jul/2025:00:01:14 -0500] "POST /wp-login.php HTTP/1.1" 302 - "http://corals.io" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.126 Safari/537.36 Edg/113.0.1774.50" 35.198.215.128 - - [13/Jul/2025:00:32:05 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2600:3000:2710:200::83 - - [13/Jul/2025:00:45:20 -0500] "GET /.well-known/acme-challenge/gI4qrT-pCXj6w25qMJ1IP0oypPnFecnB_X63FsVsZEM HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 94.23.222.158 - - [13/Jul/2025:01:10:34 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 43.157.170.126 - - [13/Jul/2025:01:28:46 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.131.71.39 - - [13/Jul/2025:01:39:29 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 89.46.91.25 - - [13/Jul/2025:01:40:01 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" 185.177.72.205 - - [13/Jul/2025:01:49:07 -0500] "GET /.git/HEAD HTTP/1.1" 301 - "-" "-" 185.177.72.205 - - [13/Jul/2025:01:49:08 -0500] "GET /.env HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:09 -0500] "GET /.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:10 -0500] "GET /phpinfo HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:12 -0500] "GET /_profiler/phpinfo HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:13 -0500] "GET /info.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:15 -0500] "GET /index.html HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:16 -0500] "GET /backend/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:18 -0500] "GET /api/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:20 -0500] "GET /env.backup HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:21 -0500] "GET /phpinfo.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:23 -0500] "GET /main/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:24 -0500] "GET /.env.old HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:26 -0500] "GET /api/config.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:27 -0500] "GET /.aws/credentials HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:28 -0500] "GET /lara/phpinfo.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:30 -0500] "GET /core/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:32 -0500] "GET /application.properties HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:33 -0500] "GET /prod/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:35 -0500] "GET /kyc/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:37 -0500] "GET /aws/credentials HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:38 -0500] "GET /laravael/core/.env HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:40 -0500] "GET /server-info.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:41 -0500] "GET /.aws/config HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:43 -0500] "GET /docker/app/.env HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:44 -0500] "GET /lara/info.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:46 -0500] "GET /.env.prod HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:47 -0500] "GET /config/local.yml HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:49 -0500] "GET /secrets/aws_ses.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:50 -0500] "GET /awsstats/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:52 -0500] "GET /admin/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:53 -0500] "GET /config/storage.yml HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:55 -0500] "GET /settings.py HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:56 -0500] "GET /apps/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:58 -0500] "GET /opt/aws/ses.env HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:49:59 -0500] "GET /logs/aws/ses.log HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:50:01 -0500] "GET /private/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:50:03 -0500] "GET /docker-compose.yml HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.205 - - [13/Jul/2025:01:50:04 -0500] "GET /.git/config HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2600:3000:2710:200::81 - - [13/Jul/2025:01:50:21 -0500] "GET /.well-known/acme-challenge/rQXUKM4CwUzGYFc7AQXK3qSZAkQyJHvLi6GQTcJGgy4 HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 185.177.72.104 - - [13/Jul/2025:02:02:21 -0500] "GET /.git/HEAD HTTP/1.1" 301 - "-" "-" 185.177.72.104 - - [13/Jul/2025:02:02:22 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.69.240.195 - - [13/Jul/2025:02:09:22 -0500] "GET /admin/uploads/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:23 -0500] "GET /admin/uploads/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:24 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:25 -0500] "GET /admin/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:26 -0500] "GET /doc/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:26 -0500] "GET /doc/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:27 -0500] "GET /file/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:28 -0500] "GET /file/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:29 -0500] "GET /alfanew.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:29 -0500] "GET /alfanew.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:30 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:31 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:32 -0500] "GET /wp-mail.php HTTP/1.1" 403 1060 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:33 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:34 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:35 -0500] "GET /WSOEnigma.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:36 -0500] "GET /WSOEnigma.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:37 -0500] "GET /adminfuns.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:38 -0500] "GET /adminfuns.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:40 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:40 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:42 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:43 -0500] "GET /ini.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:45 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:46 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:47 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:48 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:50 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:50 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:52 -0500] "GET /upfile.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:53 -0500] "GET /upfile.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:54 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:55 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:57 -0500] "GET /wp-includes/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:57 -0500] "GET /wp-includes/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:09:59 -0500] "GET /zwso.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:00 -0500] "GET /zwso.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:01 -0500] "GET /bypass.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:02 -0500] "GET /bypass.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:04 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:05 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:06 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:07 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:09 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:10 -0500] "GET /moon.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:11 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:12 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:14 -0500] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:15 -0500] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:16 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:17 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:18 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:19 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:19 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:20 -0500] "GET /wp-admin.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:21 -0500] "GET /wp-admin.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:22 -0500] "GET /404.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:23 -0500] "GET /404.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:24 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:24 -0500] "GET /wp-includes/css/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:26 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:27 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:28 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:29 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:31 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:32 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:34 -0500] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:35 -0500] "GET /css/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:36 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:37 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:39 -0500] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:40 -0500] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:41 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:42 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:44 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:45 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:47 -0500] "GET /wp-admin/includes/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:47 -0500] "GET /wp-admin/includes/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:49 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:50 -0500] "GET /sites/default/files/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:52 -0500] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:53 -0500] "GET /wp-admin/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:55 -0500] "GET /assets/images/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:56 -0500] "GET /assets/images/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:58 -0500] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:58 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:10:59 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:01 -0500] "GET /wp-activate.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:04 -0500] "GET /cache-compat.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:05 -0500] "GET /cache-compat.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:07 -0500] "GET /admin-post.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:08 -0500] "GET /admin-post.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:10 -0500] "GET /wp-sigunq.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:11 -0500] "GET /wp-sigunq.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:12 -0500] "GET /index/function.php/img/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:13 -0500] "GET /index/function.php/img/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:15 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:16 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:17 -0500] "GET /upload/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:18 -0500] "GET /upload/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:19 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:19 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:20 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:21 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:21 -0500] "GET /ALFA_DATA/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:22 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:23 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:24 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:25 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:26 -0500] "GET /wp-signup.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:28 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:29 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:30 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:37 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:38 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:39 -0500] "GET /post.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:39 -0500] "GET /post.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:41 -0500] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:41 -0500] "GET /images/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:42 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:43 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:44 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:47 -0500] "GET /wsoyanz.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:47 -0500] "GET /wsoyanz.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:48 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:49 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:50 -0500] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "-" 209.145.62.177 - - [13/Jul/2025:02:11:53 -0500] "POST /wp-cron.php?doing_wp_cron=1752390713.6260690689086914062500 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 13.69.240.195 - - [13/Jul/2025:02:11:53 -0500] "GET /as/function HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:53 -0500] "GET /as/function HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:55 -0500] "GET /images/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:56 -0500] "GET /images/cloud.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:57 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:11:57 -0500] "GET /admin/uploads/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:11:58 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:11:59 -0500] "GET /admin/uploads/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:00 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:00 -0500] "GET /admin/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:01 -0500] "GET /alfa-rex.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:01 -0500] "GET /admin/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:03 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:04 -0500] "GET /doc/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:04 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:05 -0500] "GET /doc/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:06 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:08 -0500] "GET /file/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:08 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:10 -0500] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:09 -0500] "GET /file/function.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:11 -0500] "GET /alfanew.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:10 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:12 -0500] "GET /wp-comments-post.php HTTP/1.1" 405 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:13 -0500] "GET /wp-cron.php HTTP/1.1" 200 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:12 -0500] "GET /alfanew.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:13 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:13 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:14 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:14 -0500] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:16 -0500] "GET /ws.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:16 -0500] "GET /wp-mail.php HTTP/1.1" 403 1060 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:18 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:17 -0500] "GET /ws.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:19 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:19 -0500] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:21 -0500] "GET /WSOEnigma.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:20 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:23 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:22 -0500] "GET /WSOEnigma.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:24 -0500] "GET /adminfuns.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:24 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:26 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:26 -0500] "GET /adminfuns.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:28 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:27 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:29 -0500] "GET /mah/function.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:29 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:31 -0500] "GET /mah/function.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:32 -0500] "GET /ini.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:33 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:33 -0500] "GET /ini.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:34 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:36 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:37 -0500] "GET /bak.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:37 -0500] "GET /wp-includes/js/tinymce/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:38 -0500] "GET /bak.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:40 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:41 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:41 -0500] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:42 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:43 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:44 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:45 -0500] "GET /wp-includes/customize/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:47 -0500] "GET /upfile.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:45 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:48 -0500] "GET /ws.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:48 -0500] "GET /upfile.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:49 -0500] "GET /ws.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:50 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:51 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:51 -0500] "GET /wp-admin/images/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:53 -0500] "GET /wp-includes/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:52 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:55 -0500] "GET /yanz.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:55 -0500] "GET /wp-includes/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:57 -0500] "GET /zwso.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:56 -0500] "GET /yanz.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:58 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:12:58 -0500] "GET /zwso.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:00 -0500] "GET /bypass.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:12:59 -0500] "GET /makeasmtp.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:01 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:01 -0500] "GET /bypass.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:03 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:02 -0500] "GET /shell.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:04 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:04 -0500] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:06 -0500] "GET /wp-admin/css/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:06 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:08 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:08 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:11 -0500] "GET /moon.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:10 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:12 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:12 -0500] "GET /moon.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:14 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:13 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:16 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:16 -0500] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:17 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:18 -0500] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:19 -0500] "GET /log.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:19 -0500] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:20 -0500] "GET /log.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:22 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:23 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:23 -0500] "GET /wp-includes/js/dist/development/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:25 -0500] "GET /wp-trackback.php HTTP/1.1" 404 130 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:24 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:26 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:27 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:27 -0500] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:28 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:30 -0500] "GET /wp-admin.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:30 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:31 -0500] "GET /wp-admin.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:31 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:33 -0500] "GET /404.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:33 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:34 -0500] "GET /404.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:37 -0500] "GET /wp-includes/css/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:39 -0500] "GET /wp-content/themes/ HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:39 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:38 -0500] "GET /wp-includes/css/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:41 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:41 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:42 -0500] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:43 -0500] "GET /wp-load.php HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:45 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:44 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:46 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:48 -0500] "GET /wp-includes/sodium_compat/namespaced HTTP/1.1" 301 262 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:46 -0500] "GET /wp-includes/js/crop/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:48 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:48 -0500] "GET /wp-content/uploads/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:49 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:49 -0500] "GET /wp-content/uploads/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:51 -0500] "GET /css.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:52 -0500] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:53 -0500] "GET /css.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:53 -0500] "GET /css/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:55 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:55 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:57 -0500] "GET /wp-includes/repeater.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:56 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:13:59 -0500] "GET /blog.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:13:59 -0500] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:00 -0500] "GET /blog.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:00 -0500] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:02 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:03 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:04 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:04 -0500] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:07 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:07 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:08 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:08 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:11 -0500] "GET /wp-admin/includes/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:11 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:12 -0500] "GET /wp-admin/includes/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:12 -0500] "GET /wp-includes/customize/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:15 -0500] "GET /wp-content/plugins/ HTTP/1.1" 200 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:15 -0500] "GET /sites/default/files/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:16 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:16 -0500] "GET /sites/default/files/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:17 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:19 -0500] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:20 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:20 -0500] "GET /wp-admin/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:21 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:22 -0500] "GET /assets/images/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:22 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:22 -0500] "GET /assets/images/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:24 -0500] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:23 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:24 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:25 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:25 -0500] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:25 -0500] "GET /cgi-bin/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:26 -0500] "GET /wp-activate.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:27 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:27 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:29 -0500] "GET /cache-compat.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:29 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:30 -0500] "GET /cache-compat.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:30 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:31 -0500] "GET /admin-post.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:32 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:32 -0500] "GET /admin-post.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:32 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:33 -0500] "GET /wp-sigunq.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:34 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:34 -0500] "GET /wp-sigunq.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:34 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:36 -0500] "GET /img/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:36 -0500] "GET /index/function.php/img/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:36 -0500] "GET /img/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:37 -0500] "GET /index/function.php/img/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:38 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:38 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:39 -0500] "GET /alfanew2.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:39 -0500] "GET /wp-content/plugins/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:40 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:40 -0500] "GET /upload/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:41 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:41 -0500] "GET /upload/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:42 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:43 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:43 -0500] "GET /inputs.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:44 -0500] "GET /wp-content/updraft/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:45 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:45 -0500] "GET /wp-content/plugins/index.php HTTP/1.1" 200 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:46 -0500] "GET /ALFA_DATA/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:46 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:46 -0500] "GET /ALFA_DATA/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:47 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:48 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:48 -0500] "GET /wp-content/updates.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:49 -0500] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:49 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:50 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:50 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:51 -0500] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:51 -0500] "GET /wp-includes/js/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:52 -0500] "GET /wp-signup.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:52 -0500] "GET /wp-includes/js/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:54 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:55 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:55 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:56 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:56 -0500] "GET /wp-admin/network/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:57 -0500] "GET /wp-login.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:57 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:58 -0500] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:14:59 -0500] "GET /img/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:14:59 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:00 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 36 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:00 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:00 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:01 -0500] "GET /post.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:00 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:02 -0500] "GET /plugins/function.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:01 -0500] "GET /post.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:02 -0500] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:02 -0500] "GET /plugins/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:03 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:03 -0500] "GET /images/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:04 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:04 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:05 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:05 -0500] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:06 -0500] "GET /wp-admin/network/index.php HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:06 -0500] "GET /plugins.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:07 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:08 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:09 -0500] "GET /wp-consar.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:09 -0500] "GET /wsoyanz.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:09 -0500] "GET /wp-consar.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:09 -0500] "GET /wsoyanz.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:11 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:11 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:11 -0500] "GET /wp-content/gallery/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:11 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:12 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:12 -0500] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:13 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:14 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:15 -0500] "GET /as/function HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:15 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:16 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:16 -0500] "GET /as/function HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:17 -0500] "GET /images/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:16 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:18 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:17 -0500] "GET /images/cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:18 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:18 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:19 -0500] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:20 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:21 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:21 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:21 -0500] "GET /alfa-rex.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:22 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:23 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:23 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:24 -0500] "GET /uploads/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:24 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:25 -0500] "GET /uploads/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:26 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:27 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:27 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:27 -0500] "GET /wp-admin/includes/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:28 -0500] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:28 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:29 -0500] "GET /content.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:29 -0500] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:30 -0500] "GET /wp-comments-post.php HTTP/1.1" 405 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:30 -0500] "GET /content.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:31 -0500] "GET /wp-cron.php HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:31 -0500] "GET /wp-content/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:31 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:32 -0500] "GET /wp-content/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:32 -0500] "GET /alfa-rex2.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:33 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:34 -0500] "GET /ws.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:34 -0500] "GET /wp-admin/maint/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:34 -0500] "GET /ws.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:36 -0500] "GET /repeater.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:36 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:37 -0500] "GET /repeater.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:37 -0500] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:38 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:39 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:39 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:40 -0500] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:41 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:42 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:43 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:43 -0500] "GET /wp-admin/cloud.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:45 -0500] "GET /install.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:46 -0500] "GET /mah/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:47 -0500] "GET /install.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:47 -0500] "GET /mah/function.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:49 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:49 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:50 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:51 -0500] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:53 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:53 -0500] "GET /bak.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:54 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:55 -0500] "GET /bak.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:56 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:57 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:15:58 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:15:58 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:00 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:00 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:02 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:01 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:04 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:04 -0500] "GET /ws.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:05 -0500] "GET /ws.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:05 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:08 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:08 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:10 -0500] "GET /wp-admin/js/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:10 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:13 -0500] "GET /yanz.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:13 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:14 -0500] "GET /yanz.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:14 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:16 -0500] "GET /makeasmtp.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:16 -0500] "GET /wp-conflg.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:17 -0500] "GET /makeasmtp.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:18 -0500] "GET /wp-conflg.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:20 -0500] "GET /shell.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:20 -0500] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:21 -0500] "GET /shell.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:21 -0500] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:23 -0500] "GET /wp-admin/images/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:24 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:24 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:25 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:26 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 36 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:26 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:26 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:26 -0500] "GET /wp-includes/widgets/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:27 -0500] "GET /wp-includes/images/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:28 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:28 -0500] "GET /.well-known/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:29 -0500] "GET /libraries/vendor/updates.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:29 -0500] "GET /.well-known/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:31 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:32 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:33 -0500] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:33 -0500] "GET /radio.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:35 -0500] "GET /log.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:35 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:36 -0500] "GET /log.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:37 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:38 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:39 -0500] "GET /ae.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:39 -0500] "GET /wp-includes/Text/Diff/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:40 -0500] "GET /ae.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:41 -0500] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:42 -0500] "GET /usersfiles/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:42 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:43 -0500] "GET /usersfiles/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:45 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:45 -0500] "GET /avaa.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:46 -0500] "GET /avaa.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:46 -0500] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:49 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:50 -0500] "GET /edit.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:52 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:49 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:53 -0500] "GET /simple.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:56 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:57 -0500] "GET /wp-includes/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:59 -0500] "GET /wp-content/themes/ HTTP/1.1" 200 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:16:59 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:16:59 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:01 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:01 -0500] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:03 -0500] "GET /ajax-actions.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:04 -0500] "GET /wp-load.php HTTP/1.1" 200 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:05 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:05 -0500] "GET /ajax-actions.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:08 -0500] "GET /wp-2019.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:07 -0500] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:10 -0500] "GET /wp-includes/sodium_compat/namespaced HTTP/1.1" 301 262 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:10 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:09 -0500] "GET /wp-2019.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:12 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:11 -0500] "GET /wp-includes/sodium_compat/namespaced/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:14 -0500] "GET /css.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:13 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:15 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:15 -0500] "GET /css.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:17 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:17 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:19 -0500] "GET /libraries/phpmailer/updates.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:19 -0500] "GET /wp-p.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:21 -0500] "GET /blog.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:21 -0500] "GET /wp-p.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:22 -0500] "GET /blog.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:23 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:25 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:25 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:26 -0500] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:28 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:28 -0500] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:29 -0500] "GET /chosen.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:30 -0500] "GET /wp-admin/css/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:31 -0500] "GET /fw.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:32 -0500] "GET /wp-includes/customize/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:33 -0500] "GET /wp-includes/customize/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:33 -0500] "GET /fw.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:35 -0500] "GET /wp-content/plugins/ HTTP/1.1" 200 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:36 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:35 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:37 -0500] "GET /wp-includes/blocks/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:37 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:39 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:39 -0500] "GET /ebs.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:40 -0500] "GET /wp-content/languages/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:41 -0500] "GET /ebs.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:43 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:43 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:44 -0500] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:44 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:47 -0500] "GET /cgi-bin/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:47 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:48 -0500] "GET /cgi-bin/about.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:48 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:50 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:50 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:51 -0500] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:51 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:52 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:52 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [13/Jul/2025:02:17:53 -0500] "POST /wp-cron.php?doing_wp_cron=1752391073.3857150077819824218750 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 138.91.59.146 - - [13/Jul/2025:02:17:52 -0500] "GET /wp-includes/rest-api/search/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:53 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:54 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:54 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:54 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:54 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:55 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:55 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:56 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:56 -0500] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:57 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:58 -0500] "GET /img/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:58 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:58 -0500] "GET /img/about.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:17:59 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:17:59 -0500] "GET /alfanew2.php7 HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:00 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:00 -0500] "GET /alfanew2.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:01 -0500] "GET /classsmtps.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:01 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:01 -0500] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:01 -0500] "GET /classsmtps.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:02 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:02 -0500] "GET /inputs.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:03 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:03 -0500] "GET /inputs.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:04 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:04 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:05 -0500] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:05 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:06 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:06 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:07 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:06 -0500] "GET /wp-content/updates.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:08 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:08 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:08 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:08 -0500] "GET /wp-admin/css/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:09 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:09 -0500] "GET /wp-includes/js/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:10 -0500] "GET /wp-includes/js/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:10 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:11 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:11 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:11 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:11 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:12 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:13 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:13 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:13 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:14 -0500] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:14 -0500] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:15 -0500] "GET /img/xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:15 -0500] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:16 -0500] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 36 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:16 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:16 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:16 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:16 -0500] "GET /wp-includes/widgets/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:17 -0500] "GET /alfanew.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:17 -0500] "GET /plugins/function.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:18 -0500] "GET /alfanew.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:18 -0500] "GET /plugins/function.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:19 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:19 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:19 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:19 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:20 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:20 -0500] "GET /plugins.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:21 -0500] "GET /updates.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:21 -0500] "GET /plugins.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:21 -0500] "GET /updates.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:22 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:22 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:23 -0500] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:23 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:24 -0500] "GET /wp-consar.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:24 -0500] "GET /hoot.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:24 -0500] "GET /wp-consar.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:24 -0500] "GET /hoot.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:25 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:25 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:26 -0500] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:26 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:27 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:27 -0500] "GET /mail.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:27 -0500] "GET /wp-admin/repeater.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:28 -0500] "GET /mail.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:28 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:29 -0500] "GET /about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:29 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:29 -0500] "GET /about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:30 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:30 -0500] "GET /xmlrpc.php HTTP/1.1" 405 60 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:31 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:31 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:32 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:32 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:32 -0500] "GET /wp-content/banners/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:33 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:33 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:33 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:34 -0500] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:34 -0500] "GET /img/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:35 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:35 -0500] "GET /img/cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:36 -0500] "GET /wp-includes/js/swfupload/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:36 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:37 -0500] "GET /uploads/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:37 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:37 -0500] "GET /uploads/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:38 -0500] "GET /images/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:38 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:38 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:38 -0500] "GET /images/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:39 -0500] "GET /wp-includes/js/jquery/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:39 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:40 -0500] "GET /content.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:41 -0500] "GET /content.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:42 -0500] "GET /wp-content/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:42 -0500] "GET /cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:42 -0500] "GET /wp-content/about.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:43 -0500] "GET /cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:43 -0500] "GET /wp-admin/maint/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:44 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:44 -0500] "GET /wp-admin/maint/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:44 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:45 -0500] "GET /repeater.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:45 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:46 -0500] "GET /repeater.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:46 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:47 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:47 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:47 -0500] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:47 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:48 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:49 -0500] "GET /plugins/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:49 -0500] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:49 -0500] "GET /plugins/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:50 -0500] "GET /install.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:50 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:51 -0500] "GET /install.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:51 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:52 -0500] "GET /wp-admin/images/index.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:52 -0500] "GET /dropdown.php HTTP/1.1" 301 - "-" "-" 209.145.62.177 - - [13/Jul/2025:02:18:53 -0500] "POST /wp-cron.php?doing_wp_cron=1752391133.3758280277252197265625 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 13.69.240.195 - - [13/Jul/2025:02:18:52 -0500] "GET /dropdown.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:52 -0500] "GET /wp-admin/images/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:54 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:54 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:55 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:55 -0500] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:56 -0500] "GET /wp-blog-header.php HTTP/1.1" 404 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:56 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:56 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:56 -0500] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:57 -0500] "GET /admin.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:57 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:58 -0500] "GET /wp-content/repeater.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:58 -0500] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:18:59 -0500] "GET /wp-content/repeater.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:18:59 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:00 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:00 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:01 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:02 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:03 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:03 -0500] "GET /libraries/legacy/updates.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:05 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:04 -0500] "GET /wp-includes/Text/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:06 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:06 -0500] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:07 -0500] "GET /wp.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:08 -0500] "GET /wp-conflg.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:09 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 36 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:09 -0500] "GET /as.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:09 -0500] "GET /wp-conflg.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:10 -0500] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:10 -0500] "GET /as.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:11 -0500] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:12 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:12 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:13 -0500] "GET /themes.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:13 -0500] "GET /cgi-bin/cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:15 -0500] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 36 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:15 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:16 -0500] "GET /wp-includes/images/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:16 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:17 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:16 -0500] "GET /wp-includes/images/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:18 -0500] "GET /.well-known/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:18 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 404 19038 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:20 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:19 -0500] "GET /.well-known/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:21 -0500] "GET /radio.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:21 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:22 -0500] "GET /radio.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:23 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:24 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:24 -0500] "GET /wp-admin/meta/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:25 -0500] "GET /.well-knownold/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:25 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:26 -0500] "GET /ae.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:26 -0500] "GET /.well-knownold/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:27 -0500] "GET /ae.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:28 -0500] "GET /about.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:29 -0500] "GET /usersfiles/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:29 -0500] "GET /about.php7 HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:31 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:30 -0500] "GET /usersfiles/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:32 -0500] "GET /avaa.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:32 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:33 -0500] "GET /avaa.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:33 -0500] "GET /css/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:34 -0500] "GET /edit.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:34 -0500] "GET /css/cloud.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:36 -0500] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:35 -0500] "GET /edit.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:37 -0500] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:37 -0500] "GET /simple.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:38 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:38 -0500] "GET /simple.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:39 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:40 -0500] "GET /wp-includes/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:41 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:41 -0500] "GET /wp-includes/about.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:42 -0500] "GET /.well-known/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:43 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:43 -0500] "GET /about/function.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:43 -0500] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:44 -0500] "GET /about/function.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:44 -0500] "GET /ajax-actions.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:45 -0500] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:45 -0500] "GET /ajax-actions.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:46 -0500] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:46 -0500] "GET /wp-2019.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:47 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:47 -0500] "GET /wp-2019.php HTTP/1.1" 404 18400 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:47 -0500] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:48 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:48 -0500] "GET /templates/beez3/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:48 -0500] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 18402 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:49 -0500] "GET /templates/beez3/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:49 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 301 - "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:50 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:50 -0500] "GET /wp-includes/pomo/ HTTP/1.1" 404 19036 "-" "-" 13.69.240.195 - - [13/Jul/2025:02:19:51 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:51 -0500] "GET /wp-p.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:52 -0500] "GET /wp-p.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:53 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:54 -0500] "GET /wp-includes/Requests/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:55 -0500] "GET /chosen.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:55 -0500] "GET /chosen.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:56 -0500] "GET /fw.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:57 -0500] "GET /fw.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:58 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:19:59 -0500] "GET /wp-admin/user/cloud.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:00 -0500] "GET /ebs.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:00 -0500] "GET /ebs.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:01 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:02 -0500] "GET /wp-admin/css/colors/coffee/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:03 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:04 -0500] "GET /wp-includes/theme-compat/theme-compat/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:05 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:06 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:07 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:07 -0500] "GET /wp-includes/js/jcrop/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:08 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:09 -0500] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 404 19038 "-" "-" 209.145.62.177 - - [13/Jul/2025:02:20:11 -0500] "POST /wp-cron.php?doing_wp_cron=1752391211.1221001148223876953125 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 138.91.59.146 - - [13/Jul/2025:02:20:10 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:11 -0500] "GET /wp-includes/certificates/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:13 -0500] "GET /xmrlpc.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:14 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:15 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:16 -0500] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:18 -0500] "GET /classsmtps.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:19 -0500] "GET /classsmtps.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:21 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:22 -0500] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:23 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:24 -0500] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:26 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:27 -0500] "GET /wp-includes/js/thickbox/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:28 -0500] "GET /xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:29 -0500] "GET /xmrlpc.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:30 -0500] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:31 -0500] "GET /wp-admin/css/colors/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:33 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:33 -0500] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:35 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:36 -0500] "GET /wp-includes/images/media/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:37 -0500] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:38 -0500] "GET /wp-admin/css/colors/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:39 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:40 -0500] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:42 -0500] "GET /alfanew.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:43 -0500] "GET /alfanew.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:44 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:45 -0500] "GET /wp-includes/Requests/src/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:47 -0500] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:47 -0500] "GET /updates.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:47 -0500] "GET /updates.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:49 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:50 -0500] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:51 -0500] "GET /hoot.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:52 -0500] "GET /hoot.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:53 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:53 -0500] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:54 -0500] "GET /mail.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:55 -0500] "GET /mail.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:56 -0500] "GET /about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:56 -0500] "GET /about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:57 -0500] "GET /xmlrpc.php HTTP/1.1" 405 60 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:58 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:20:59 -0500] "GET /geju.php/wp-includes/images/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:00 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:00 -0500] "GET /wp-admin/ajax-actions.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:01 -0500] "GET /img/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:02 -0500] "GET /img/cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:03 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:04 -0500] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:05 -0500] "GET /images/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:06 -0500] "GET /images/about.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:07 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:09 -0500] "GET /cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:10 -0500] "GET /cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:11 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:12 -0500] "GET /wp-admin/includes/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:13 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:13 -0500] "GET /wp-includes/Text/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:15 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:15 -0500] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:16 -0500] "GET /plugins/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:17 -0500] "GET /plugins/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:18 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:18 -0500] "GET /wp-includes/js/dist/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:20 -0500] "GET /dropdown.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:20 -0500] "GET /dropdown.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:21 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:22 -0500] "GET /wp-includes/js/dist/vendor/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:23 -0500] "GET /wp-blog-header.php HTTP/1.1" 404 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:24 -0500] "GET /admin.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:24 -0500] "GET /admin.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:25 -0500] "GET /wp-content/repeater.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:26 -0500] "GET /wp-content/repeater.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:27 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:28 -0500] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:29 -0500] "GET /wp-includes/Text/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:29 -0500] "GET /wp-includes/Text/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:30 -0500] "GET /wp.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:31 -0500] "GET /wp.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:32 -0500] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 36 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:32 -0500] "GET /as.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:33 -0500] "GET /as.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:35 -0500] "GET /themes.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:36 -0500] "GET /themes.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:37 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:39 -0500] "GET /wp-content/themes/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:40 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:41 -0500] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:42 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:43 -0500] "GET /wp-includes/js/codemirror/ HTTP/1.1" 404 19038 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:45 -0500] "GET /wp-admin/meta/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:46 -0500] "GET /wp-admin/meta/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:47 -0500] "GET /.well-knownold/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:48 -0500] "GET /.well-knownold/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:49 -0500] "GET /about.php7 HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:50 -0500] "GET /about.php7 HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:52 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:53 -0500] "GET /wp-admin/dropdown.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:55 -0500] "GET /css/cloud.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:56 -0500] "GET /css/cloud.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:57 -0500] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:58 -0500] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:21:59 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:00 -0500] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:02 -0500] "GET /.well-known/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:03 -0500] "GET /.well-known/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:04 -0500] "GET /about/function.php HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:06 -0500] "GET /about/function.php HTTP/1.1" 404 18400 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:08 -0500] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:09 -0500] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:10 -0500] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:11 -0500] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 404 18402 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:13 -0500] "GET /templates/beez3/ HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:14 -0500] "GET /templates/beez3/ HTTP/1.1" 404 19036 "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:15 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 - "-" "-" 138.91.59.146 - - [13/Jul/2025:02:22:16 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 18402 "-" "-" 198.55.98.182 - - [13/Jul/2025:02:42:11 -0500] "GET /.git/config HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0" 2600:3000:2710:200::81 - - [13/Jul/2025:02:55:21 -0500] "GET /.well-known/acme-challenge/bYsnYIJJ2Bo8_osiSsfvEaPFeIfsqtxj_0Rau9oOYIo HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 45.4.172.194 - - [13/Jul/2025:03:32:55 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 185.177.72.11 - - [13/Jul/2025:03:34:24 -0500] "GET /.git/HEAD HTTP/1.1" 301 - "-" "-" 185.177.72.11 - - [13/Jul/2025:03:34:25 -0500] "GET /.env HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:25 -0500] "GET /.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:26 -0500] "GET /phpinfo HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:27 -0500] "GET /_profiler/phpinfo HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:28 -0500] "GET /info.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:28 -0500] "GET /index.html HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:29 -0500] "GET /backend/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:30 -0500] "GET /api/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:31 -0500] "GET /env.backup HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:32 -0500] "GET /phpinfo.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:32 -0500] "GET /main/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:33 -0500] "GET /.env.old HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:34 -0500] "GET /api/config.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:35 -0500] "GET /.aws/credentials HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:36 -0500] "GET /lara/phpinfo.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:36 -0500] "GET /core/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:37 -0500] "GET /application.properties HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:38 -0500] "GET /prod/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:39 -0500] "GET /kyc/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:40 -0500] "GET /aws/credentials HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:40 -0500] "GET /laravael/core/.env HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:41 -0500] "GET /server-info.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:42 -0500] "GET /.aws/config HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:43 -0500] "GET /docker/app/.env HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:44 -0500] "GET /lara/info.php HTTP/1.1" 404 18400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:44 -0500] "GET /.env.prod HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:45 -0500] "GET /config/local.yml HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:46 -0500] "GET /secrets/aws_ses.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:47 -0500] "GET /awsstats/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:48 -0500] "GET /admin/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:49 -0500] "GET /config/storage.yml HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:49 -0500] "GET /settings.py HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:50 -0500] "GET /apps/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:51 -0500] "GET /opt/aws/ses.env HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:52 -0500] "GET /logs/aws/ses.log HTTP/1.1" 404 19038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 209.145.62.177 - - [13/Jul/2025:03:34:53 -0500] "POST /wp-cron.php?doing_wp_cron=1752395693.1477010250091552734375 HTTP/1.1" 200 - "-" "WordPress/6.8.1; https://www.corals.io" 185.177.72.11 - - [13/Jul/2025:03:34:52 -0500] "GET /private/.env HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:53 -0500] "GET /docker-compose.yml HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.177.72.11 - - [13/Jul/2025:03:34:54 -0500] "GET /.git/config HTTP/1.1" 404 19036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 162.254.150.233 - - [13/Jul/2025:03:47:15 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 60.248.174.146 - - [13/Jul/2025:04:00:24 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" 2600:3000:1511:200::81 - - [13/Jul/2025:04:00:26 -0500] "GET /.well-known/acme-challenge/yDiHZITz28yT4xqPuto01AwIFJgh36Vtu7tgcQoNT8U HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 120.138.19.65 - - [13/Jul/2025:04:12:06 -0500] "POST /xmlrpc.php HTTP/1.1" 503 7314 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/91.0" 43.153.58.28 - - [13/Jul/2025:04:24:35 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 42.236.101.194 - - [13/Jul/2025:04:45:37 -0500] "GET / HTTP/1.1" 301 - "http://www.corals.io/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider" 185.117.225.7 - - [13/Jul/2025:04:52:49 -0500] "GET /robots.txt HTTP/1.1" 301 - "-" "python-requests/2.31.0" 185.117.225.7 - - [13/Jul/2025:04:52:50 -0500] "GET /robots.txt HTTP/1.1" 200 114 "-" "python-requests/2.31.0" 185.117.225.7 - - [13/Jul/2025:04:52:51 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; BitSightBot/1.0)" 45.4.172.194 - - [13/Jul/2025:04:57:11 -0500] "GET /wp-login.php HTTP/1.1" 302 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"