%PDF-
%PDF-
Mini Shell
Mini Shell
194.38.23.16 - - [20/Nov/2024:07:26:41 -0500] "GET /wp-content/plugins/contus-hd-flv-player/uploadVideo.php HTTP/1.1" 301 795 "-" "ALittle Client"
104.171.161.184 - - [20/Nov/2024:09:48:00 -0500] "GET /wp-content/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:01 -0500] "GET /.well-known/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:01 -0500] "GET /wp-content/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:01 -0500] "GET /.tmb/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:02 -0500] "GET /images/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:02 -0500] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:03 -0500] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:03 -0500] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:03 -0500] "GET /wp-content/themes/freeyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:04 -0500] "GET /wp-content/plugins/doyanz/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:04 -0500] "GET /wp-content/themes/panama/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:05 -0500] "GET /wp-content/themes/blogai/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:05 -0500] "GET /wp-content/themes/agwin/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:06 -0500] "GET /wp-content/plugins/app-calendar/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:06 -0500] "GET /jetpack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:07 -0500] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:07 -0500] "GET /bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:07 -0500] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:08 -0500] "GET /.wp-back.phP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:00 -0500] "GET /fwe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:00 -0500] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:01 -0500] "GET /.well-known/pki-validation/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:02 -0500] "GET /wp-content/uploads/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:02 -0500] "GET /.well-known/acme-challenge/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:03 -0500] "GET /wp-content/themes/erapress/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:04 -0500] "GET /wp-content/themes/moog/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:05 -0500] "GET /wp-content/uploads/2023/11/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:05 -0500] "GET /wp-content/uploads/2023/12/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:06 -0500] "GET /wp-content/themes/quext/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:06 -0500] "GET /wp-content/smm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:07 -0500] "GET /xltavrat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:08 -0500] "GET /wp-content/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:08 -0500] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:09 -0500] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:10 -0500] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:10 -0500] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:11 -0500] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:08 -0500] "GET /wp-admin/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:09 -0500] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:09 -0500] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:09 -0500] "GET /wp-commentin.php?pass=f0aab4595a024d626315fb786dce8282 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:10 -0500] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:11 -0500] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:11 -0500] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:12 -0500] "GET /wp-content/data-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:12 -0500] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:13 -0500] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:13 -0500] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:14 -0500] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:15 -0500] "GET /wp-content/themes/welfare-charity/www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:15 -0500] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:16 -0500] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:16 -0500] "GET /wp-content/themes/applica/400.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:17 -0500] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:17 -0500] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:11 -0500] "GET /libraries/fof/database/iterator/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:12 -0500] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:12 -0500] "GET /plugins/finder/categories/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:13 -0500] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:13 -0500] "GET /thanks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:14 -0500] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:14 -0500] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:14 -0500] "GET /wp-content/themes/mero-megazines/ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:15 -0500] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:15 -0500] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:16 -0500] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:16 -0500] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:17 -0500] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:18 -0500] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:18 -0500] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:19 -0500] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:19 -0500] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:19 -0500] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:18 -0500] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:18 -0500] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:19 -0500] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:20 -0500] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:20 -0500] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:20 -0500] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:20 -0500] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:21 -0500] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:21 -0500] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:21 -0500] "GET /wp-content/plugins/wordpress-three/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:22 -0500] "GET /wp-content/plugins/column/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:22 -0500] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:23 -0500] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:24 -0500] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:24 -0500] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:24 -0500] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:25 -0500] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:25 -0500] "GET /loger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:21 -0500] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:22 -0500] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:22 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:23 -0500] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:23 -0500] "GET /wp-content/plugins/hellopress/0xlufix2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:23 -0500] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:24 -0500] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:25 -0500] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:26 -0500] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:26 -0500] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:27 -0500] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:27 -0500] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:27 -0500] "GET /gank.php.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:28 -0500] "GET /mt/pekok.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:28 -0500] "GET /ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:28 -0500] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:28 -0500] "GET /wp.php?Chitoge HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:29 -0500] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:29 -0500] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:25 -0500] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:26 -0500] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:27 -0500] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:29 -0500] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:29 -0500] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:30 -0500] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:30 -0500] "GET /wp-content/plugins/w0rdpr3ssnew/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:30 -0500] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:31 -0500] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:31 -0500] "GET /wp-content/plugins/instabuilder2/cache/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:32 -0500] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:32 -0500] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:33 -0500] "GET /wp-content/plugins/wpputty/wpputty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:30 -0500] "GET /database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:31 -0500] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:31 -0500] "GET /wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:32 -0500] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:32 -0500] "GET /wp-content/plugins/wpyii2/wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
104.171.161.184 - - [20/Nov/2024:09:48:33 -0500] "GET /wp-content/plugins/dos2unix/dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
Zerion Mini Shell 1.0