196.251.83.100 - - [08/Oct/2025:09:19:08 -0600] "GET / HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:09 -0600] "GET /wordpress HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:09 -0600] "GET /wp-admin/setup-config.php HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:09 -0600] "GET /wp-admin/install.php HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:09 -0600] "GET /wp HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:09 -0600] "GET /blog HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:09 -0600] "GET /new HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET / HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /old HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /newsite HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET / HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /test HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /wordpress HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /main HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /wp-admin/setup-config.php HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:10 -0600] "GET /testing HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /wp-admin/install.php HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /site HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /wp HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /backup HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /blog HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /demo HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /new HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /home HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /old HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /tmp HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /newsite HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:11 -0600] "GET /dev HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /test HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /cms HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /main HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /portal HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /testing HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /web HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /site HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /backup HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:12 -0600] "GET /demo HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:13 -0600] "GET /home HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:13 -0600] "GET /tmp HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:13 -0600] "GET /dev HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:13 -0600] "GET /cms HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:13 -0600] "GET /portal HTTP/1.1" 200 - "-" "-" 196.251.83.100 - - [08/Oct/2025:09:19:13 -0600] "GET /web HTTP/1.1" 200 - "-" "-" 54.187.63.152 - - [08/Oct/2025:11:42:16 -0600] "GET / HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:16 -0600] "GET //.env.old HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:17 -0600] "GET //database/.env HTTP/1.1" 403 10389 "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:17 -0600] "GET //.env.docker HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:17 -0600] "GET //backend/.env HTTP/1.1" 403 10387 "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:17 -0600] "GET //v2/.env HTTP/1.1" 403 10377 "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:17 -0600] "GET //assets/.env HTTP/1.1" 403 10385 "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 54.187.63.152 - - [08/Oct/2025:11:42:17 -0600] "GET //.env_sample HTTP/1.1" 200 - "https://www.google.com/" "Mozilla/5.0 (Windows NT.6.2; WOW64) Gecko/20071404 Firefox/10.0" 195.178.110.223 - - [08/Oct/2025:13:55:20 -0600] "GET / HTTP/1.1" 200 - "-" "HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" 3.85.106.35 - - [08/Oct/2025:14:12:05 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36 Edg/103.0.1264.44" 3.92.238.223 - - [08/Oct/2025:14:12:06 -0600] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0" 54.198.132.185 - - [08/Oct/2025:14:12:06 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" 34.229.104.17 - - [08/Oct/2025:14:12:06 -0600] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0" 54.162.123.72 - - [08/Oct/2025:14:12:33 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36 Edg/103.0.1264.44" 52.91.81.254 - - [08/Oct/2025:14:12:33 -0600] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0" 3.87.61.69 - - [08/Oct/2025:14:12:33 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" 52.90.44.120 - - [08/Oct/2025:14:12:34 -0600] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0" 45.130.203.191 - - [08/Oct/2025:14:53:59 -0600] "GET /.git/HEAD HTTP/1.1" 200 - "-" "Python-urllib/3.10" 114.119.142.131 - - [08/Oct/2025:18:32:16 -0600] "GET /robots.txt HTTP/1.1" 200 301 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 54.164.173.216 - - [08/Oct/2025:22:11:05 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36 Edg/103.0.1264.44" 18.234.158.23 - - [08/Oct/2025:22:11:06 -0600] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0" 174.129.78.52 - - [08/Oct/2025:22:11:06 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" 52.23.254.228 - - [08/Oct/2025:22:11:06 -0600] "GET /favicon.ico HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0" 34.13.213.120 - - [09/Oct/2025:00:33:43 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.13.213.120 - - [09/Oct/2025:00:33:43 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.13.213.120 - - [09/Oct/2025:00:33:43 -0600] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.13.213.120 - - [09/Oct/2025:00:33:44 -0600] "GET /xmlrpc.php?rsd HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.13.213.120 - - [09/Oct/2025:00:33:44 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 34.13.213.120 - - [09/Oct/2025:00:33:45 -0600] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/about.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/cache/index.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/themes/about.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-includes/Text/about.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-includes/blocks/about.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /wp-setup.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /zwso.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /.alf.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /autoload_classmap/function.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /ez.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /.bod/.ll/ss.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /admin/index.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:17 -0600] "GET /dropdown.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /gelay.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /installer.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /xleet.php HTTP/1.1" 403 10378 "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /wp-sigunq.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /wso112233.php HTTP/1.1" 403 10386 "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /alfanew.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /fw.php HTTP/1.1" 200 - "-" "-" 4.236.122.171 - - [09/Oct/2025:01:16:18 -0600] "GET /install.php HTTP/1.1" 200 - "-" "-"