I tried to make a script to catch suspicious stuff.

I noticed these in the logs.

```
2024-04-19 13:56:12 - 172.71.174.167 - GET /wp-content/plugins/hellopress/wp_filemanager.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /wp-admin/images/atomlib.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /wp-admin/maint/edit.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /mini.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /simple.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /choosen.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /chosen.php?p=
2024-04-19 13:56:12 - 172.71.174.167 - GET /wp-content/uploads/option.php
2024-04-19 13:56:12 - 172.71.174.167 - GET /wp-includes/PHPMailer/admin.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-admin/user/about.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-includes/customize/amaxx.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-content/uploads/about.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /filefuns.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-content/plugins/background-image-cropper/tmpls.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-admin/images/profile.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-content/plugins/revslider/includes/external/page/index.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /wp-configs.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /post.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /assets/app.php
2024-04-19 13:56:13 - 172.71.174.167 - GET /gecko.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /web.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /wp-includes/IXR/admin.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /wp-admin/css/colors/blue/blue.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /wp-activate.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /wp-l0gin.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /worksec.php
2024-04-19 13:56:14 - 172.71.174.167 - GET /inputs.php
2024-04-19 13:56:15 - 172.71.174.167 - GET /byp.php
2024-04-19 13:56:15 - 172.71.174.167 - GET /xmlrpc.php
2024-04-19 13:56:15 - 172.71.174.167 - GET /wp-links.php
2024-04-19 13:56:15 - 172.71.174.167 - GET /input.php?p=
2024-04-19 13:56:16 - 172.71.174.167 - GET /wp-content/plugins/apikey/mar.php
2024-04-19 13:56:16 - 172.71.174.167 - GET /wp-content/uploads/wp-booter.php
2024-04-19 13:56:16 - 172.71.174.167 - GET /wp-admin/css/colors/light/about.php
2024-04-19 13:56:16 - 172.71.174.167 - GET /cong.php?p=
2024-04-19 13:56:16 - 172.71.174.167 - GET /wp-admin/css/colors/midnight/admin.php
2024-04-19 13:56:16 - 172.71.174.167 - GET /wp-includes/class-controller-theme-comment.php
2024-04-19 13:56:16 - 172.71.174.167 - GET /x.php?p=
2024-04-19 13:56:17 - 172.71.174.167 - GET /wp-includes/fonts/log404.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /radio.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /style.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /test.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /wp-admin/css/colors/blue/index.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /wp-admin/network/index.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /wp-includes/images/smilies/about.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /sidwso.php
2024-04-19 13:56:17 - 172.71.174.167 - GET /wp-includes/Text/Diff/Renderer/install.php
2024-04-19 13:56:18 - 172.71.174.167 - GET /wp-content/about.php
2024-04-19 13:56:18 - 172.71.174.167 - GET /wp-includes/Text/about.php
2024-04-19 13:56:18 - 172.71.174.167 - GET /wp-includes/ID3/about.php
2024-04-19 13:56:18 - 172.71.174.167 - GET /wp-includes/customize/about.php
2024-04-19 13:56:18 - 172.71.174.167 - GET /wp-includes/widgets/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-includes/block-patterns/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-content/upgrade-temp-backup/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-admin/includes/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-content/blogs.dir/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-includes/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /cgi-bin/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-content/gallery/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-includes/blocks/about.php
2024-04-19 13:56:19 - 172.71.174.167 - GET /wp-admin/images/about.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/network/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /cgi-bin/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-content/updates.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /css/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /img/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/css/colors/coffee/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/images/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/js/widgets/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/includes/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/css/colors/blue/cloud.php
2024-04-19 13:56:20 - 172.71.174.167 - GET /wp-admin/cloud.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /updates.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /libraries/legacy/updates.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /libraries/vendor/updates.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /alfa-rex.php7
2024-04-19 13:56:21 - 172.71.174.167 - GET /alfanew.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /wp-admin/js/widgets/about.php7
2024-04-19 13:56:21 - 172.71.174.167 - GET /wp-p.php7
2024-04-19 13:56:21 - 172.71.174.167 - GET /wp-includes/repeater.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /wsoyanz.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /wp-content/plugins/seoo/wsoyanz.php
2024-04-19 13:56:21 - 172.71.174.167 - GET /cache-compat.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /wp-admin/ajax-actions.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /admin-post.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /wp-admin/dropdown.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /wp-admin/css/index.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /dropdown.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /about.php
2024-04-19 13:56:22 - 172.71.174.167 - GET /ebs.php7
2024-04-19 13:56:22 - 172.71.174.167 - GET /ws.php7
2024-04-19 13:56:22 - 172.71.174.167 - GET /alfanew2.php7
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-content/themes/pridmag/db.php?u
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-content/plugins/linkpreview/db.php?u
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-content/plugins/seoplugins/db.php?u
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-content/plugins/seoplugins/mar.php
2024-04-19 13:56:23 - 172.71.174.167 - GET /.well-known/pki-validation/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.71.174.167 - GET /cgi-bin/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-admin/user/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.71.174.167 - GET /img/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-admin/css/colors/coffee/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.71.174.167 - GET /images/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.71.174.167 - GET /wp-admin/js/widgets/xmrlpc.php?p=
2024-04-19 13:56:24 - 172.71.174.167 - GET /wp-admin/css/colors/xmrlpc.php?p=
2024-04-19 13:56:24 - 172.71.174.167 - GET /edit.php
2024-04-19 13:56:24 - 172.71.174.167 - GET /lang.php
2024-04-19 13:56:24 - 172.71.174.167 - GET /wp-admin/maint/edit.php
2024-04-19 13:56:25 - 172.71.174.167 - GET /choosen.php
2024-04-19 13:56:25 - 172.71.174.167 - GET /wp-content/uploads/option.php
2024-04-19 13:56:25 - 172.71.174.167 - GET /wp-content/plugins/background-image-cropper/tmpls.php
2024-04-19 13:56:25 - 172.71.174.167 - GET /wp-configs.php
2024-04-19 13:56:25 - 172.71.174.167 - GET /wp-content/themes/alera/alpha.php
2024-04-19 13:56:25 - 172.71.174.167 - GET /post.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /r3x.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /wp-includes/certificates/about.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /wp-includes/qw.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /function.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /wp-includes/IXR/admin.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /wp-includes/IXR/allez.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /wp-admin/css/colors/blue/blue.php
2024-04-19 13:56:26 - 172.71.174.167 - GET /wp-activate.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /inputs.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /byp.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /wp/wp-includes/menu.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /css.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /wp-links.php
2024-04-19 13:56:27 - 172.71.174.167 - GET /input.php?p=
2024-04-19 13:56:27 - 172.71.174.167 - GET /gawean.PhP7
2024-04-19 13:56:28 - 172.71.174.167 - GET /.tmb/admin.php
2024-04-19 13:56:28 - 172.71.174.167 - GET /wp-content/plugins/apikey/mar.php
2024-04-19 13:56:28 - 172.71.174.167 - GET /.well-known/zxhfwqyt.php
2024-04-19 13:56:28 - 172.71.174.167 - GET /wp-2019.php
2024-04-19 13:56:28 - 172.71.174.167 - GET /wp-content/uploads/wp-booter.php
2024-04-19 13:56:28 - 172.71.174.167 - GET /cong.php?p=
2024-04-19 13:56:28 - 172.71.174.167 - GET /.well-known/pki-validation/a.php
2024-04-19 13:56:29 - 172.71.174.167 - GET /ws.php
2024-04-19 13:56:29 - 172.71.174.167 - GET /radio.php
2024-04-19 13:56:29 - 172.71.174.167 - GET /fw.php
2024-04-19 13:56:29 - 172.71.174.167 - GET /wp-admin/css/colors/blue/index.php
2024-04-19 13:56:29 - 172.71.174.167 - GET /sx.php
2024-04-19 13:56:29 - 172.71.174.167 - GET /wp-includes/images/smilies/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /sidwso.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /jquery.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes/Requests/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes/rest-api/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes/SimplePie/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-content/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /.well-known/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes/ID3/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /img/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes/customize/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes.bak/html-api/about.php
2024-04-19 13:56:30 - 172.71.174.167 - GET /wp-includes/widgets/about.php
2024-04-19 13:56:31 - 172.71.174.167 - GET /wp-content/themes/about.php
2024-04-19 13:56:31 - 172.71.174.167 - GET /wp-admin/includes/about.php
2024-04-19 13:56:31 - 172.71.174.167 - GET /images/about.php
2024-04-19 13:56:31 - 172.71.174.167 - GET /wp-includes/blocks/about.php
2024-04-19 13:56:31 - 172.71.174.167 - GET /wp-admin/css/about.php
2024-04-19 13:56:31 - 172.71.174.167 - GET /wp-admin/images/about.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /cgi-bin/cloud.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /wp-content/updates.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /img/cloud.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /wp-admin/css/colors/coffee/cloud.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /wp-admin/images/cloud.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /avaa.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /images/cloud.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /wp-admin/js/widgets/cloud.php
2024-04-19 13:56:32 - 172.71.174.167 - GET /wp-includes/Requests/Text/admin.php
2024-04-19 13:56:33 - 172.71.174.167 - GET /updates.php
2024-04-19 13:56:33 - 172.71.174.167 - GET /libraries/legacy/updates.php
2024-04-19 13:56:33 - 172.71.174.167 - GET /libraries/phpmailer/updates.php
2024-04-19 13:56:33 - 172.71.174.167 - GET /wp-p.php7
2024-04-19 13:56:33 - 172.71.174.167 - GET /wsoyanz.php
2024-04-19 13:56:33 - 172.71.174.167 - GET /yanz.php
2024-04-19 13:56:34 - 172.71.174.167 - GET /repeater.php
2024-04-19 13:56:34 - 172.71.174.167 - GET /wp-admin/dropdown.php
2024-04-19 13:56:34 - 172.71.174.167 - GET /wp-admin/css/index.php
2024-04-19 13:56:34 - 172.71.174.167 - GET /dropdown.php
2024-04-19 13:56:34 - 172.71.174.167 - GET /about.php
2024-04-19 13:56:34 - 172.71.174.167 - GET /about.php7
2024-04-19 13:56:34 - 172.71.174.167 - GET /alfanew.php7
2024-04-19 13:56:34 - 172.71.174.167 - GET /adminfuns.php7
2024-04-19 13:56:34 - 172.71.174.167 - GET /ebs.php7
2024-04-19 13:56:35 - 172.71.174.167 - GET /alfa-rex2.php7
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-admin/css/colors/index.php
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-content/themes/seotheme/mar.php
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-content/themes/seotheme/db.php?u
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-content/plugins/seoplugins/db.php?u
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-admin/network/xmrlpc.php?p=
2024-04-19 13:56:35 - 172.71.174.167 - GET /xmrlpc.php?p=
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-admin/user/xmrlpc.php?p=
2024-04-19 13:56:35 - 172.71.174.167 - GET /img/xmrlpc.php?p=
2024-04-19 13:56:35 - 172.71.174.167 - GET /wp-admin/css/colors/coffee/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.71.174.167 - GET /images/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.71.174.167 - GET /wp-admin/includes/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.71.174.167 - GET /wp-admin/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.71.174.167 - GET /file.php
2024-04-19 13:56:36 - 172.71.174.167 - GET /license.php
2024-04-19 13:56:36 - 172.71.174.167 - GET /uploader.php
2024-04-19 13:56:36 - 172.71.174.167 - GET /randkeyword.php
2024-04-19 13:56:36 - 172.71.174.167 - GET /lang.php
[flingweb@vm4435 [~/public_html]]# cat attack-request.log | grep -i well-known | grep -v 172.71.174.167
2024-04-19 13:56:15 - 172.70.178.216 - GET /.well-known/index.php?p=
2024-04-19 13:56:16 - 172.70.178.216 - GET /.well-known/zxhfwqyt.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /.well-known/pki-validation/a.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /.well-known/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /.well-known/pki-validation/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /.well-known/pki-validation/cloud.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /.well-known/index.php?p=
2024-04-19 13:56:31 - 172.70.178.216 - GET /.well-known/pki-validation/about.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /.well-known/pki-validation/cloud.php
2024-04-19 13:56:35 - 172.70.178.216 - GET /.well-known/pki-validation/xmrlpc.php?p=
[flingweb@vm4435 [~/public_html]]# cat attack-request.log | grep -i 172.70.178.216
2024-04-19 13:56:12 - 172.70.178.216 - GET /ioxi001.PhP7
2024-04-19 13:56:13 - 172.70.178.216 - GET /wp-content/themes/twentyfive/include.php
2024-04-19 13:56:13 - 172.70.178.216 - GET /wp-crons.php
2024-04-19 13:56:13 - 172.70.178.216 - GET /wp-content/themes/alera/alpha.php
2024-04-19 13:56:13 - 172.70.178.216 - GET /r3x.php
2024-04-19 13:56:13 - 172.70.178.216 - GET /shell20211028.php
2024-04-19 13:56:13 - 172.70.178.216 - GET /fm.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /ern1.PhP7
2024-04-19 13:56:14 - 172.70.178.216 - GET /wp-admin/YP1cuvy6WrD.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /wp-includes/certificates/about.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /images/class-config.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /defaults.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /wp-includes/qw.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /function.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /wp-includes/IXR/allez.php
2024-04-19 13:56:14 - 172.70.178.216 - GET /comdofuns.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /LA.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /moon.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /mah.php?p=
2024-04-19 13:56:15 - 172.70.178.216 - GET /wp-includes/sitemaps/about.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /indeex.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /index1.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /wp/wp-includes/menu.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /css.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /gawean.PhP7
2024-04-19 13:56:15 - 172.70.178.216 - GET /wp-admin/maint/moon.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /wp-includes/widgets/class-wp-widget-tag.php
2024-04-19 13:56:15 - 172.70.178.216 - GET /.well-known/index.php?p=
2024-04-19 13:56:16 - 172.70.178.216 - GET /.tmb/admin.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /1.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /.well-known/zxhfwqyt.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /moded.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /autoload_classmap.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /wp-2019.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /assets/images/cmd.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /doc.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /wp-includes/pomo/wp-login.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /.well-known/pki-validation/a.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /assets/images/tinyimg.php
2024-04-19 13:56:16 - 172.70.178.216 - GET /ws.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /wp-links-opml.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /wp-file.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /wp-includes/js/dist/vendor/vcard.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /fw.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /wp-includes/sx.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /sx.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /include/bussubmit.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /jquery.php
2024-04-19 13:56:17 - 172.70.178.216 - GET /wp-includes/Requests/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-includes/style-engine/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-includes/rest-api/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-includes/SimplePie/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-content/banners/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /.well-known/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /img/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-content/languages/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-includes.bak/html-api/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-includes/IXR/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /wp-admin/js/about.php
2024-04-19 13:56:18 - 172.70.178.216 - GET /.well-known/pki-validation/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /wp-includes/pomo/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /wp-content/updraft/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /wp-content/themes/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /images/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /wp-includes/images/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /wp-admin/css/about.php
2024-04-19 13:56:19 - 172.70.178.216 - GET /.well-known/pki-validation/cloud.php
2024-04-19 13:56:20 - 172.70.178.216 - GET /cloud.php
2024-04-19 13:56:20 - 172.70.178.216 - GET /wp-admin/user/cloud.php
2024-04-19 13:56:20 - 172.70.178.216 - GET /avaa.php
2024-04-19 13:56:20 - 172.70.178.216 - GET /images/cloud.php
2024-04-19 13:56:20 - 172.70.178.216 - GET /wp-includes/Requests/Text/admin.php
2024-04-19 13:56:20 - 172.70.178.216 - GET /wp-admin/css/colors/cloud.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /libraries/phpmailer/updates.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /wp-content/plugins/Cache/Cache.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /wp-admin/repeater.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /wp-content/repeater.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /yanz.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /wp-content/plugins/seoo/wsoyanz1.php
2024-04-19 13:56:21 - 172.70.178.216 - GET /ajax-actions.php
2024-04-19 13:56:22 - 172.70.178.216 - GET /wp-consar.php
2024-04-19 13:56:22 - 172.70.178.216 - GET /repeater.php
2024-04-19 13:56:22 - 172.70.178.216 - GET /wp-admin/maint/maint/ajax-actions.php
2024-04-19 13:56:22 - 172.70.178.216 - GET /about.php7
2024-04-19 13:56:22 - 172.70.178.216 - GET /alfanew.php7
2024-04-19 13:56:22 - 172.70.178.216 - GET /adminfuns.php7
2024-04-19 13:56:22 - 172.70.178.216 - GET /alfa-rex2.php7
2024-04-19 13:56:23 - 172.70.178.216 - GET /wp-admin/images/index.php
2024-04-19 13:56:23 - 172.70.178.216 - GET /wp-admin/css/colors/index.php
2024-04-19 13:56:23 - 172.70.178.216 - GET /wp-content/themes/seotheme/mar.php
2024-04-19 13:56:23 - 172.70.178.216 - GET /wp-content/themes/seotheme/db.php?u
2024-04-19 13:56:23 - 172.70.178.216 - GET /wp-admin/network/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.70.178.216 - GET /xmrlpc.php?p=
2024-04-19 13:56:23 - 172.70.178.216 - GET /css/xmrlpc.php?p=
2024-04-19 13:56:23 - 172.70.178.216 - GET /wp-admin/images/xmrlpc.php?p=
2024-04-19 13:56:24 - 172.70.178.216 - GET /wp-admin/includes/xmrlpc.php?p=
2024-04-19 13:56:24 - 172.70.178.216 - GET /wp-admin/css/colors/blue/xmrlpc.php?p=
2024-04-19 13:56:24 - 172.70.178.216 - GET /wp-admin/xmrlpc.php?p=
2024-04-19 13:56:24 - 172.70.178.216 - GET /crop.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /file.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /license.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /uploader.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /lock.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /hauling-can.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /randkeyword.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /wp-admin/images/atomlib.php
2024-04-19 13:56:24 - 172.70.178.216 - GET /install.php?p=
2024-04-19 13:56:24 - 172.70.178.216 - GET /mini.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /simple.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /chosen.php?p=
2024-04-19 13:56:25 - 172.70.178.216 - GET /ioxi001.PhP7
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-includes/PHPMailer/admin.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-admin/user/about.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-includes/customize/amaxx.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-content/themes/twentyfive/include.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-content/uploads/about.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /filefuns.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-crons.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-admin/images/profile.php
2024-04-19 13:56:25 - 172.70.178.216 - GET /wp-content/plugins/revslider/includes/external/page/index.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /assets/app.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /shell20211028.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /gecko.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /fm.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /ern1.PhP7
2024-04-19 13:56:26 - 172.70.178.216 - GET /wp-admin/YP1cuvy6WrD.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /web.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /images/class-config.php
2024-04-19 13:56:26 - 172.70.178.216 - GET /defaults.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /wp-l0gin.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /worksec.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /comdofuns.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /LA.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /moon.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /mah.php?p=
2024-04-19 13:56:27 - 172.70.178.216 - GET /wp-includes/sitemaps/about.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /xmlrpc.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /indeex.php
2024-04-19 13:56:27 - 172.70.178.216 - GET /index1.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /wp-admin/maint/moon.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /wp-includes/widgets/class-wp-widget-tag.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /.well-known/index.php?p=
2024-04-19 13:56:28 - 172.70.178.216 - GET /1.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /moded.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /autoload_classmap.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /assets/images/cmd.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /doc.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /wp-admin/css/colors/light/about.php
2024-04-19 13:56:28 - 172.70.178.216 - GET /wp-includes/pomo/wp-login.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /assets/images/tinyimg.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-admin/css/colors/midnight/admin.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-includes/class-controller-theme-comment.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /x.php?p=
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-includes/fonts/log404.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-links-opml.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-file.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /style.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-includes/js/dist/vendor/vcard.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /test.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-includes/sx.php
2024-04-19 13:56:29 - 172.70.178.216 - GET /wp-admin/network/index.php
2024-04-19 13:56:30 - 172.70.178.216 - GET /include/bussubmit.php
2024-04-19 13:56:30 - 172.70.178.216 - GET /wp-includes/Text/Diff/Renderer/install.php
2024-04-19 13:56:30 - 172.70.178.216 - GET /wp-includes/style-engine/about.php
2024-04-19 13:56:30 - 172.70.178.216 - GET /wp-content/banners/about.php
2024-04-19 13:56:30 - 172.70.178.216 - GET /wp-includes/Text/about.php
2024-04-19 13:56:30 - 172.70.178.216 - GET /wp-content/languages/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-includes/IXR/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-admin/js/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /.well-known/pki-validation/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-includes/pomo/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-includes/block-patterns/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-content/updraft/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-content/upgrade-temp-backup/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-content/blogs.dir/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-includes/images/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-includes/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /cgi-bin/about.php
2024-04-19 13:56:31 - 172.70.178.216 - GET /wp-content/gallery/about.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /.well-known/pki-validation/cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /wp-admin/network/cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /css/cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /wp-admin/user/cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /wp-admin/css/colors/cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /wp-admin/includes/cloud.php
2024-04-19 13:56:32 - 172.70.178.216 - GET /wp-admin/css/colors/blue/cloud.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-admin/cloud.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /libraries/vendor/updates.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /alfa-rex.php7
2024-04-19 13:56:33 - 172.70.178.216 - GET /alfanew.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-content/plugins/Cache/Cache.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-admin/js/widgets/about.php7
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-admin/repeater.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-includes/repeater.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-content/repeater.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-content/plugins/seoo/wsoyanz.php
2024-04-19 13:56:33 - 172.70.178.216 - GET /wp-content/plugins/seoo/wsoyanz1.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /cache-compat.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /ajax-actions.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /wp-admin/ajax-actions.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /wp-consar.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /admin-post.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /wp-admin/maint/maint/ajax-actions.php
2024-04-19 13:56:34 - 172.70.178.216 - GET /ws.php7
2024-04-19 13:56:34 - 172.70.178.216 - GET /alfanew2.php7
2024-04-19 13:56:35 - 172.70.178.216 - GET /wp-admin/images/index.php
2024-04-19 13:56:35 - 172.70.178.216 - GET /wp-content/themes/pridmag/db.php?u
2024-04-19 13:56:35 - 172.70.178.216 - GET /wp-content/plugins/linkpreview/db.php?u
2024-04-19 13:56:35 - 172.70.178.216 - GET /wp-content/plugins/seoplugins/mar.php
2024-04-19 13:56:35 - 172.70.178.216 - GET /.well-known/pki-validation/xmrlpc.php?p=
2024-04-19 13:56:35 - 172.70.178.216 - GET /cgi-bin/xmrlpc.php?p=
2024-04-19 13:56:35 - 172.70.178.216 - GET /css/xmrlpc.php?p=
2024-04-19 13:56:35 - 172.70.178.216 - GET /wp-admin/images/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.70.178.216 - GET /wp-admin/js/widgets/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.70.178.216 - GET /wp-admin/css/colors/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.70.178.216 - GET /wp-admin/css/colors/blue/xmrlpc.php?p=
2024-04-19 13:56:36 - 172.70.178.216 - GET /crop.php
2024-04-19 13:56:36 - 172.70.178.216 - GET /edit.php
2024-04-19 13:56:36 - 172.70.178.216 - GET /lock.php
2024-04-19 13:56:36 - 172.70.178.216 - GET /hauling-can.php
```