| Server IP : 5.83.47.51 / Your IP : 216.73.217.19 Web Server : Apache System : Linux hosting.nxthost.com 5.14.0-687.44.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Sep 9 11:11:28 EDT 2026 x86_64 User : esteemro ( 1261) PHP Version : 7.4.33 Disable Function : show_source, system, shell_exec, passthru, exec, popen, proc_open MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/esteemro/access-logs/ |
Upload File : |
45.227.253.15 - - [23/Sep/2026:17:00:10 +0300] "GET /wp-includes/blocks/media-text/media-text/index.php?of=1 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/101.0" 45.227.253.15 - - [23/Sep/2026:17:05:21 +0300] "GET /wp-includes/js/imgareaselect/imgareaselect/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:82.0) Gecko/20100101 Firefox/82.0" 5.83.47.50 - - [23/Sep/2026:17:05:21 +0300] "POST /wp-cron.php?doing_wp_cron=1790172321.4564630985260009765625 HTTP/1.1" 200 0 "-" "WordPress/7.1; https://dev.esteem.ro" 45.227.253.15 - - [23/Sep/2026:17:05:21 +0300] "GET /?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.35" 45.227.253.15 - - [23/Sep/2026:17:05:22 +0300] "GET /wp-includes/js/imgareaselect/imgareaselect/?of=1 HTTP/1.1" 404 36209 "http://dev.esteem.ro/wp-includes/js/imgareaselect/imgareaselect/index.php?of=1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:82.0) Gecko/20100101 Firefox/82.0" 45.227.253.15 - - [23/Sep/2026:17:06:46 +0300] "GET /wp-includes/blocks/query-no-results/query-no-results/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:103.0) Gecko/20100101 Firefox/103.0" 45.227.253.15 - - [23/Sep/2026:17:06:46 +0300] "GET /seo/seo/seo/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.4.4 Mobile/15E148 Safari/604.1" 45.227.253.15 - - [23/Sep/2026:17:06:47 +0300] "GET /wp-includes/blocks/query-no-results/query-no-results/?of=1 HTTP/1.1" 404 36210 "http://dev.esteem.ro/wp-includes/blocks/query-no-results/query-no-results/index.php?of=1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:103.0) Gecko/20100101 Firefox/103.0" 45.227.253.15 - - [23/Sep/2026:17:06:47 +0300] "GET /seo/seo/seo/?of=1 HTTP/1.1" 404 36184 "http://dev.esteem.ro/seo/seo/seo/index.php?of=1" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.4.4 Mobile/15E148 Safari/604.1" 45.227.253.15 - - [23/Sep/2026:17:06:48 +0300] "GET /seo/seo/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_2_1 like Mac OS X; ja) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5" 45.227.253.15 - - [23/Sep/2026:17:06:49 +0300] "GET /seo/seo/?of=1 HTTP/1.1" 404 36184 "http://dev.esteem.ro/seo/seo/index.php?of=1" "Mozilla/5.0 (iPad; U; CPU OS 4_2_1 like Mac OS X; ja) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5" 45.227.253.15 - - [23/Sep/2026:17:08:10 +0300] "GET /wp-content/plugins/td-composer/assets/images/sidebar/website_interface/website_interface/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" 45.227.253.15 - - [23/Sep/2026:17:08:10 +0300] "GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/style_pro/style_pro/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" 45.227.253.15 - - [23/Sep/2026:17:08:10 +0300] "GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/style_pro/style_pro/?of=1 HTTP/1.1" 404 36210 "http://dev.esteem.ro/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/style_pro/style_pro/index.php?of=1" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" 45.227.253.15 - - [23/Sep/2026:17:08:10 +0300] "GET /wp-content/plugins/td-composer/assets/images/sidebar/website_interface/website_interface/?of=1 HTTP/1.1" 404 36210 "http://dev.esteem.ro/wp-content/plugins/td-composer/assets/images/sidebar/website_interface/website_interface/index.php?of=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" 45.227.253.15 - - [23/Sep/2026:17:12:23 +0300] "GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/today_news_pro/today_news_pro/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:103.0) Gecko/20100101 Firefox/102.0" 45.227.253.15 - - [23/Sep/2026:17:12:24 +0300] "GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/today_news_pro/today_news_pro/?of=1 HTTP/1.1" 404 36209 "http://dev.esteem.ro/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/today_news_pro/today_news_pro/index.php?of=1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:103.0) Gecko/20100101 Firefox/102.0" 45.227.253.15 - - [23/Sep/2026:17:12:44 +0300] "GET /filefuns.php?of=1 HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.227.253.15 - - [23/Sep/2026:17:14:06 +0300] "GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/panel/views/ajax_boxes/td_panel_theme_colors/td_panel_theme_colors/index.php?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/535.24 (KHTML, like Gecko) Chrome/83.0.1055.1 Safari/535.24" 45.227.253.15 - - [23/Sep/2026:17:14:07 +0300] "GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/panel/views/ajax_boxes/td_panel_theme_colors/td_panel_theme_colors/?of=1 HTTP/1.1" 404 36210 "http://dev.esteem.ro/wp-content/plugins/td-composer/legacy/Newspaper/includes/panel/views/ajax_boxes/td_panel_theme_colors/td_panel_theme_colors/index.php?of=1" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/535.24 (KHTML, like Gecko) Chrome/83.0.1055.1 Safari/535.24" 105.76.187.157 - - [23/Sep/2026:18:14:17 +0300] "GET /wp-includes/js/tinymce/plugins/textcolor/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:18 +0300] "GET /includes/includes/includes/includes/includes/includes/wp-login.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:19 +0300] "GET /includes/includes/includes/includes/includes/includes/alfa-rex.PHP HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:20 +0300] "GET /includes/includes/includes/includes/includes/includes/about.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:21 +0300] "GET /includes/includes/includes/includes/includes/wp-login.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:21 +0300] "GET /includes/includes/includes/includes/includes/about.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:22 +0300] "GET /includes/includes/includes/includes/wp-login.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:26 +0300] "GET /includes/includes/includes/includes/alfa-rex.PHP HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:27 +0300] "GET /includes/includes/includes/includes/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:28 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:29 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:30 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/ HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:30 +0300] "GET /wp-content/uploads/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:31 +0300] "GET /wp-content/uploads/wp-links-opml.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:32 +0300] "GET /wp-content/uploads/system/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:32 +0300] "GET /wp-content/uploads/system/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:33 +0300] "GET /http://makmining.com/wp-content/upgrade-temp-backup/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:34 +0300] "GET /http:/makmining.com/wp-content/upgrade-temp-backup/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:35 +0300] "GET /wp-content/upgrade-temp-backup/system/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:36 +0300] "GET /wp-content/upgrade/system/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:37 +0300] "GET /wp-content/upgrade/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:37 +0300] "GET /wp-content/upgrade/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:38 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/about.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:41 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:42 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:43 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:43 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/ HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:44 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:45 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:48 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/data/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:48 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/data/ HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:51 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/data/config.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:52 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:52 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/ HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:53 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/wp-login.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:54 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:54 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/ HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:55 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:56 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:56 +0300] "GET /wp-includes/js/tinymce/plugins/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:57 +0300] "GET /wp-includes/js/tinymce/plugins/admin.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:14:58 +0300] "GET /wp-includes/js/tinymce/plugins/api.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:00 +0300] "GET /wp-includes/js/tinymce/plugins/config.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:02 +0300] "GET /wp-includes/js/tinymce/plugins/data.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:03 +0300] "GET /wp-includes/js/tinymce/plugins/db-status.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:04 +0300] "GET /wp-includes/js/tinymce/plugins/home.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:05 +0300] "GET /wp-includes/js/tinymce/plugins/load.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:05 +0300] "GET /wp-includes/js/tinymce/plugins/security.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:07 +0300] "GET /wp-includes/js/tinymce/plugins/system.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [23/Sep/2026:18:15:07 +0300] "GET /wp-includes/js/tinymce/plugins/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 5.83.47.50 - - [23/Sep/2026:19:08:15 +0300] "POST /wp-cron.php?doing_wp_cron=1790179695.4691059589385986328125 HTTP/1.1" 200 0 "-" "WordPress/7.1; https://dev.esteem.ro" 138.68.144.227 - - [23/Sep/2026:19:08:15 +0300] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:15 +0300] "GET /console/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:16 +0300] "GET /server HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:17 +0300] "GET /server-status HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:18 +0300] "GET /about HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:19 +0300] "GET /login.action HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:20 +0300] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:20 +0300] "GET /___proxy_subdomain_whm/login HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:21 +0300] "GET /___proxy_subdomain_cpanel HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:21 +0300] "GET /v2/_catalog HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:22 +0300] "GET /.DS_Store HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:23 +0300] "GET /.env HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:25 +0300] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:27 +0300] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:29 +0300] "POST /graphql HTTP/1.1" 404 36213 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:29 +0300] "POST /api HTTP/1.1" 404 36213 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:30 +0300] "POST /api/graphql HTTP/1.1" 404 36212 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:30 +0300] "POST /graphql/api HTTP/1.1" 404 36213 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:30 +0300] "POST /api/gql HTTP/1.1" 404 36212 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:30 +0300] "GET /s/1353e27343e23383e253/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:31 +0300] "GET /config.json HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:32 +0300] "GET /telescope/requests HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:33 +0300] "GET /info.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:34 +0300] "GET /.well-known/security.txt HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:35 +0300] "GET /actuator/env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:36 +0300] "GET /trace.axd HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:37 +0300] "GET /@vite/env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:38 +0300] "GET /.vscode/sftp.json HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:40 +0300] "OPTIONS / HTTP/1.1" 200 71269 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:41 +0300] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:43 +0300] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:44 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:45 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:45 +0300] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 440 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 138.68.144.227 - - [23/Sep/2026:19:08:46 +0300] "GET /debug/default/view?panel=config HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:23 +0300] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:24 +0300] "GET /console/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:25 +0300] "GET /server HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:26 +0300] "GET /server-status HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:27 +0300] "GET /about HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:28 +0300] "GET /login.action HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:29 +0300] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:29 +0300] "GET /___proxy_subdomain_whm/login HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:30 +0300] "GET /___proxy_subdomain_cpanel HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:30 +0300] "GET /v2/_catalog HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:31 +0300] "GET /.DS_Store HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:32 +0300] "GET /.env HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:34 +0300] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:36 +0300] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:38 +0300] "POST /graphql HTTP/1.1" 404 36213 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:38 +0300] "POST /api HTTP/1.1" 404 36211 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:39 +0300] "POST /api/graphql HTTP/1.1" 404 36213 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:40 +0300] "POST /graphql/api HTTP/1.1" 404 36213 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:41 +0300] "POST /api/gql HTTP/1.1" 404 36212 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:41 +0300] "GET /s/1353e27343e23383e253/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:42 +0300] "GET /config.json HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:43 +0300] "GET /telescope/requests HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:44 +0300] "GET /info.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:45 +0300] "GET /.well-known/security.txt HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:46 +0300] "GET /actuator/env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:47 +0300] "GET /trace.axd HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:48 +0300] "GET /@vite/env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:49 +0300] "GET /.vscode/sftp.json HTTP/1.1" 403 117 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:50 +0300] "OPTIONS / HTTP/1.1" 200 71269 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:52 +0300] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:53 +0300] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:54 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:55 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 207 640 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:56 +0300] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 440 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 159.65.144.72 - - [24/Sep/2026:00:00:57 +0300] "GET /debug/default/view?panel=config HTTP/1.1" 301 0 "-" "Mozilla/5.0 (l9scan/2.0.1353e27343e23383e253; +https://leakix.net)" 45.227.253.15 - - [24/Sep/2026:00:41:07 +0300] "GET /?of=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_3_4 like Mac OS X; ja) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8J2 Safari/6533.18.5" 5.83.47.50 - - [24/Sep/2026:01:30:11 +0300] "POST /wp-cron.php?doing_wp_cron=1790202611.3943259716033935546875 HTTP/1.1" 200 0 "-" "WordPress/7.1; https://dev.esteem.ro" 45.227.253.15 - - [24/Sep/2026:01:30:11 +0300] "GET /index.php/jk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:103.0) Gecko/20100101 Firefox/101.0" 45.227.253.15 - - [24/Sep/2026:01:30:11 +0300] "GET /jk HTTP/1.1" 404 36210 "http://dev.esteem.ro/index.php/jk" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:103.0) Gecko/20100101 Firefox/101.0" 5.83.47.50 - - [24/Sep/2026:03:59:56 +0300] "POST /wp-cron.php?doing_wp_cron=1790211596.7177319526672363281250 HTTP/1.1" 200 0 "-" "WordPress/7.1; https://dev.esteem.ro" 105.76.187.157 - - [24/Sep/2026:03:59:56 +0300] "GET /wp-includes/js/tinymce/plugins/textcolor/wp-login.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:03:59:57 +0300] "GET /includes/includes/includes/includes/includes/includes/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:03:59:57 +0300] "GET /includes/includes/includes/includes/includes/includes/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:03:59:58 +0300] "GET /includes/includes/includes/includes/includes/includes/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:03:59:59 +0300] "GET /includes/includes/includes/includes/includes/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:03:59:59 +0300] "GET /includes/includes/includes/includes/includes/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:00 +0300] "GET /includes/includes/includes/includes/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:00 +0300] "GET /includes/includes/includes/includes/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:01 +0300] "GET /includes/includes/includes/includes/about.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:01 +0300] "GET /wp-includes/js/wp/FTbjo.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:02 +0300] "GET /wp-includes/js/wp/FTbjo.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:02 +0300] "GET /wp-includes/blocks/audio/bdroot.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:03 +0300] "GET /wp-content/plugins/advertise/res.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:04 +0300] "GET /wp-includes/blocks/accordion-heading/host.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:04 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:05 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:05 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/ HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:06 +0300] "GET /wp-content/uploads/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:06 +0300] "GET /wp-content/uploads/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:06 +0300] "GET /wp-content/uploads/system/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:07 +0300] "GET /wp-content/uploads/system/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:07 +0300] "GET /wp-content/upgrade-temp-backup/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:08 +0300] "GET /wp-content/upgrade-temp-backup/wp-links-opml.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:08 +0300] "GET /wp-content/upgrade-temp-backup/system/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:09 +0300] "GET /wp-content/upgrade/system/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:09 +0300] "GET /wp-content/upgrade/wp-links-opml.php?p= HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:10 +0300] "GET /wp-content/upgrade/wp-links-opml.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:11 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:11 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:12 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/wp-login.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:12 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:13 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/ HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:13 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:14 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:14 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/data/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:15 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/data/ HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:15 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/data/config.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:15 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:16 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/build/ HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:16 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/wp-login.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:17 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:17 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/ HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:18 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/alfa-rex.PHP HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:18 +0300] "GET /wp-includes/PHPMailer/tmp/data/tmp/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:19 +0300] "GET /wp-includes/js/tinymce/plugins/about.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:19 +0300] "GET /wp-includes/js/tinymce/plugins/admin.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:20 +0300] "GET /wp-includes/js/tinymce/plugins/api.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:20 +0300] "GET /wp-includes/js/tinymce/plugins/config.php HTTP/1.1" 404 36208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:21 +0300] "GET /wp-includes/js/tinymce/plugins/data.php HTTP/1.1" 404 36210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 105.76.187.157 - - [24/Sep/2026:04:00:22 +0300] "GET /wp-includes/js/tinymce/plugins/db-status.php HTTP/1.1" 404 36209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 5.83.47.50 - - [24/Sep/2026:05:46:57 +0300] "POST /wp-cron.php?doing_wp_cron=1790218017.1291749477386474609375 HTTP/1.1" 200 0 "-" "WordPress/7.1; https://dev.esteem.ro" 45.227.253.15 - - [24/Sep/2026:05:46:57 +0300] "GET /index.php/jk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.35" 45.227.253.15 - - [24/Sep/2026:05:47:05 +0300] "GET /jk HTTP/1.1" 404 36209 "http://dev.esteem.ro/index.php/jk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.35" 5.83.47.50 - - [24/Sep/2026:09:53:03 +0300] "POST /wp-cron.php?doing_wp_cron=1790232783.2478539943695068359375 HTTP/1.1" 200 0 "-" "WordPress/7.1; https://dev.esteem.ro" 45.227.253.15 - - [24/Sep/2026:09:53:03 +0300] "GET /index.php/jk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36" 45.227.253.15 - - [24/Sep/2026:09:53:03 +0300] "GET /jk HTTP/1.1" 404 36209 "http://dev.esteem.ro/index.php/jk" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36"