Annex 5: Credentials downloads October-November 2015

203.81.85.66 - - [05/Oct/2015:03:10:31 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 82
 203.81.85.66 - - [11/Oct/2015:21:32:55 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 90
 61.4.76.60 - - [11/Oct/2015:23:39:44 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 68
 2a03:2880:11:1ff5:face:b00c:0:1 - - [11/Oct/2015:23:39:57 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 206 68
 203.81.85.66 - - [11/Oct/2015:23:41:16 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 68
 61.4.76.60 - - [12/Oct/2015:02:37:38 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 93
 203.81.85.66 - - [12/Oct/2015:02:41:36 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 93
 203.81.85.66 - - [12/Oct/2015:02:41:45 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 93
 203.81.85.66 - - [12/Oct/2015:02:41:46 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 93
 203.81.85.66 - - [12/Oct/2015:02:41:47 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 93
 61.4.76.60 - - [12/Oct/2015:15:13:57 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 404 46116
 61.4.76.60 - - [13/Oct/2015:02:31:33 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 200
 61.4.76.60 - - [13/Oct/2015:16:22:15 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 203
 61.4.76.60 - - [15/Oct/2015:00:49:54 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 246
 61.4.76.60 - - [15/Oct/2015:01:10:58 -0400] "GET /wp-admin/user/log.txt? HTTP/1.1" 200 246
 61.4.76.60 - - [15/Oct/2015:10:36:09 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 268
 2a03:2880:2130:cff4:face:b00c:0:1 - - [15/Oct/2015:18:38:04 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 206 275
 203.81.71.20 - - [16/Oct/2015:01:53:46 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 281
 111.84.193.94 - - [16/Oct/2015:01:53:50 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 281
 203.81.71.20 - - [16/Oct/2015:01:59:53 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 284
 111.84.193.158 - - [16/Oct/2015:09:57:18 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 304
 107.167.99.139 - - [16/Oct/2015:09:58:45 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 304
 168.235.195.195 - - [16/Oct/2015:10:03:06 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 304
 203.81.71.13 - - [16/Oct/2015:22:59:13 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 308
 168.235.195.195 - - [17/Oct/2015:04:37:45 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 313
 61.4.76.60 - - [17/Oct/2015:13:32:42 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 61.4.76.60 - - [17/Oct/2015:13:33:10 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 61.4.76.60 - - [17/Oct/2015:13:33:20 -0400] "GET /phpinfo.php?1=cat%20wp-admin/user/log.txt HTTP/1.1" 200 13649
 61.4.76.60 - - [18/Oct/2015:01:58:37 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 61.4.76.60 - - [18/Oct/2015:02:09:36 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 431
 203.81.71.46 - - [18/Oct/2015:02:12:05 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 431
 203.81.71.46 - - [18/Oct/2015:02:24:11 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 436
 203.81.71.46 - - [18/Oct/2015:03:15:13 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 200 438
 203.81.71.54 - - [24/Oct/2015:01:28:27 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 203.81.71.54 - "" [24/Oct/2015:01:28:39 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 203.81.71.54 - - [24/Oct/2015:01:29:00 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 203.81.71.54 - - [24/Oct/2015:01:29:15 -0400] "GET /phpinfo.php?1=cat%20wp-admin/user/log.txt HTTP/1.1" 200 13759
 203.81.71.54 - - [24/Oct/2015:01:29:48 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 203.81.71.54 - burma [24/Oct/2015:01:29:54 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 203.81.71.54 - Heavyrain [24/Oct/2015:01:30:19 -0400] "GET /wp-admin/user/log.txt HTTP/1.1" 401 381
 203.81.85.66 - rcn [02/Nov/2015:02:28:47 -0500] "GET /wp-admin HTTP/1.1" 401 381
 203.81.85.66 - smorozik [06/Nov/2015:03:34:34 -0500] "GET /wp-admin/user/log.txt HTTP/1.1" 200 804
 203.81.85.66 - smorozik [06/Nov/2015:03:43:39 -0500] "GET /wp-admin/user/log.txt HTTP/1.1" 200 827
 203.81.85.2 - smorozik [09/Nov/2015:08:10:54 -0500] "GET /wp-admin HTTP/1.1" 401 381
 203.81.85.2 - rcn [09/Nov/2015:08:10:41 -0500] "GET /wp-admin HTTP/1.1" 401 381