Download of wp-includes/js/tinymce/wp-tinymce.js.gz why?

Hi,

First not sure this is the right place to post this, so please move it if not.

I noticed download of some files on my Wordpress site, this one in particluar
wp-includes/js/tinymce/wp-tinymce.js.gz

I am not sure if it me in the admin area or someone looking for a way in, do views need access to the above file?

I don't allow members on this site or comments.

Regards,
Garry

  • Ash

    Hello Garry

    I have moved this ticket to the correct section as this is related to check wp-checkup.

    This is strange that checkup tries to ping that file too many times. Would you please let me know some more things? Like:
    1. Is there any failed ping attempt logged on your server from WPMU?
    2. Is there any other file pinged by checkup as you said several files?
    3. And would you please post the log where you saw checkup is downloading the file?

    Please note, during checkup it may need to ping to any of the wordpress file on your server to check the response rate of your site and look for any server down issue, but that happens when the checkup service is used, not frequently or too much.

    So, please let me know about the above. Have a nice day!

    Cheers,
    Ash

  • Nithin

    Hi Garry,

    Just to be sure, you meant this isn't happening anymore? And only occurred once? Are you able to replicate this with other websites? I'm checking this with the developer regarding to see whether there is anything specific that we could check within WPMU DEV Checkup regarding this.

    However, if you could provide more info as mentioned in the initial reply, or any steps to replicate this, it would be helpful too. :slight_smile:

    Regards,
    Nithin

  • Garry

    Hi,

    I went to the WPMU Checkup and ran it on my site, which was https://www.gazblog.com

    Here is the log entry
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/js/tinymce/wp-tinymce.js.gz HTTP/1.1" 200 208202 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"

    Also AWStats said theses files were downloaded
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/wellington/readme.txt HTTP/1.1" 200 7151 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"

    192.241.140.159 - - [18/Nov/2018:15:09:40 +0000] "GET /wp-content/plugins/wordpress-seo/readme.txt HTTP/1.1" 200 13260 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"

    I have added the full log below of start to finish of the WP Checkup, in the below post

    Regards,
    Garry

  • Garry

    Here is the full log

    66.135.60.59 - - [18/Nov/2018:15:09:29 +0000] "HEAD / HTTP/1.1" 200 0 "https://www.gazblog.com/" "WP Checkup (https://premium.wpmudev.org)"
    66.102.8.79 - - [18/Nov/2018:15:09:30 +0000] "GET / HTTP/1.1" 200 3860 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.79 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 32857 "https://www.gazblog.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.76 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/gb/style.css HTTP/1.1" 200 6081 "https://www.gazblog.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.76 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/wellington/assets/js/navigation.js HTTP/1.1" 200 1428 "https://www.gazblog.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.78 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/wellington/assets/css/custom-fonts.css HTTP/1.1" 200 434 "https://www.gazblog.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.78 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/wellington/assets/genericons/genericons.css HTTP/1.1" 200 15973 "https://www.gazblog.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.78 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 200 3826 "https://www.gazblog.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    34.196.51.17 - - [18/Nov/2018:15:09:31 +0000] "GET / HTTP/1.1" 200 20375 "-" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    66.102.8.78 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/wellington/assets/fonts/magra-v5-latin-ext_latin-700.woff2 HTTP/1.1" 200 14696 "https://www.gazblog.com/wp-content/themes/wellington/assets/css/custom-fonts.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.76 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/wellington/assets/fonts/gudea-v5-latin-ext_latin-regular.woff2 HTTP/1.1" 200 8392 "https://www.gazblog.com/wp-content/themes/wellington/assets/css/custom-fonts.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    66.102.8.78 - - [18/Nov/2018:15:09:31 +0000] "GET /wp-content/themes/wellington/assets/fonts/gudea-v5-latin-ext_latin-700.woff2 HTTP/1.1" 200 8504 "https://www.gazblog.com/wp-content/themes/wellington/assets/css/custom-fonts.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/41.0.2272.118 Safari/537.36"
    34.196.51.17 - - [18/Nov/2018:15:09:31 +0000] "GET /robots.txt HTTP/1.1" 200 131 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:32 +0000] "GET / HTTP/1.1" 200 20375 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:32 +0000] "GET / HTTP/1.1" 200 20375 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:32 +0000] "GET /wp-content/plugins HTTP/1.1" 301 617 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    5.134.11.193 - - [18/Nov/2018:15:09:32 +0000] "POST /wp-cron.php?doing_wp_cron=1542553772.7680490016937255859375 HTTP/1.1" 200 0 "https://www.gazblog.com/wp-cron.php?doing_wp_cron=1542553772.7680490016937255859375" "WordPress/4.9.8; https://www.gazblog.com"
    34.196.51.17 - - [18/Nov/2018:15:09:32 +0000] "GET /sitemap.xml HTTP/1.1" 301 0 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:32 +0000] "GET /robots.txt HTTP/1.1" 200 131 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    5.134.11.193 - - [18/Nov/2018:15:09:32 +0000] "POST /wp-cron.php?doing_wp_cron=1542553772.7680430412292480468750 HTTP/1.1" 200 0 "https://www.gazblog.com/wp-cron.php?doing_wp_cron=1542553772.7680430412292480468750" "WordPress/4.9.8; https://www.gazblog.com"
    34.196.51.17 - - [18/Nov/2018:15:09:32 +0000] "GET /sitemap_index.xml HTTP/1.1" 200 784 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:32 +0000] "GET /readme.html HTTP/1.1" 200 7415 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:32 +0000] "GET /wp-includes/rss-functions.php HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    34.196.51.17 - - [18/Nov/2018:15:09:33 +0000] "GET /sitemap_index.xml HTTP/1.1" 200 784 "https://www.gazblog.com/sitemap.xml" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-content/debug.log HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.swp HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /.wp-config.php.swp HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.original HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php_bak HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.save HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.save HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-content/themes/wellington/assets/css/custom-fonts.css HTTP/1.1" 200 2248 "-" "Incsub_Crawler"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 200 10056 "-" "Incsub_Crawler"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-content/themes/wellington/assets/genericons/genericons.css HTTP/1.1" 200 28266 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.original HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-content/themes/gb/style.css HTTP/1.1" 200 33178 "-" "Incsub_Crawler"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET / HTTP/1.1" 200 20375 "-" "Incsub_Crawler"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-content/themes/wellington/assets/js/navigation.js HTTP/1.1" 200 5273 "-" "Incsub_Crawler"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.swo HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.old HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.old HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 200 97184 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.bak HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /%23wp-config.php%23 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.orig HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php.orig HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /feed/ HTTP/1.1" 200 23833 "-" "Incsub_Crawler"
    34.196.51.17 - - [18/Nov/2018:15:09:34 +0000] "GET /page/2/ HTTP/1.1" 200 21141 "-" "Incsub_Crawler"
    192.241.140.159 - - [18/Nov/2018:15:09:33 +0000] "GET /wp-config.php%7E HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:34 +0000] "GET /searchreplacedb2.php HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:34 +0000] "HEAD / HTTP/1.1" 200 0 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-signup.php HTTP/1.1" 302 0 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-content/mu-plugins/ HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:34 +0000] "GET /wp-login.php?action=register HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:34 +0000] "GET /xmlrpc.php HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/ HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/css/buttons-rtl.css HTTP/1.1" 200 9484 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/css/editor.min.css HTTP/1.1" 200 26214 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/js/wp-emoji-loader.min.js HTTP/1.1" 200 1779 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js HTTP/1.1" 200 156559 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/js/tinymce/wp-tinymce.js.gz HTTP/1.1" 200 208202 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-admin/js/customize-nav-menus.min.js HTTP/1.1" 200 46509 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-admin/js/customize-controls.js HTTP/1.1" 200 289044 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/js/customize-preview.js HTTP/1.1" 200 27836 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-includes/js/plupload/plupload.js HTTP/1.1" 200 60314 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:35 +0000] "GET /wp-admin/js/common.js HTTP/1.1" 200 32919 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-admin/js/wp-fullscreen.js HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-includes/css/admin-bar.css HTTP/1.1" 200 25094 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-content/themes/twentyten/style.css HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-includes/js/wp-ajax-response.js HTTP/1.1" 200 3121 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-includes/js/thickbox/thickbox.css HTTP/1.1" 200 2658 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-includes/js/tinymce/plugins/wpeditimage/editor_plugin.js HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-includes/js/tinymce/themes/advanced/js/image.js HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:36 +0000] "GET /wp-includes/js/tinymce/themes/advanced/js/link.js HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /wp-includes/js/wp-ajax.js HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /wp-content/themes/default/style.css HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /wp-layout.css HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /layout2b.css HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /feed/ HTTP/1.1" 200 23833 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /feed/rdf/ HTTP/1.1" 200 24423 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:37 +0000] "GET /feed/atom/ HTTP/1.1" 200 25344 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /readme.html HTTP/1.1" 200 7415 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /sitemap.xml HTTP/1.1" 301 0 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /sitemap_index.xml HTTP/1.1" 200 784 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /wp-links-opml.php HTTP/1.1" 200 182 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /wp-content/themes/gb/style.css HTTP/1.1" 200 33178 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /wp-content/themes/gb/readme.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /wp-content/themes/gb/README.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /wp-content/themes/gb/Readme.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:38 +0000] "GET /wp-content/themes/gb/ReadMe.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/gb/README.TXT HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/gb/readme.TXT HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/gb/changelog.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/gb/ HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/gb/error_log HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/wellington/style.css HTTP/1.1" 200 50824 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/wellington/readme.txt HTTP/1.1" 200 7151 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/wellington/changelog.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:39 +0000] "GET /wp-content/themes/wellington/ HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:40 +0000] "GET /wp-content/themes/wellington/error_log HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:40 +0000] "GET /wp-content/plugins/wordpress-seo/readme.txt HTTP/1.1" 200 13260 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:40 +0000] "GET /wp-content/plugins/wordpress-seo/changelog.txt HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:40 +0000] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 403 609 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:40 +0000] "GET /wp-content/plugins/wordpress-seo/error_log HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /wp-content/plugins/stop-user-enumeration/ HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /0f64bf9f89c32f8c2b4c4dddfc5de185.html HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET / HTTP/1.1" 200 20375 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=2 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=1 HTTP/1.1" 301 0 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=5 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=10 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=4 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=9 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=8 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=7 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=3 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:41 +0000] "GET /?author=6 HTTP/1.1" 404 11647 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"
    192.241.140.159 - - [18/Nov/2018:15:09:42 +0000] "GET / HTTP/1.1" 200 20375 "https://www.gazblog.com/" "WPMUDEV WP Checkup (https://premium.wpmudev.org)"

  • Nithin

    Hi Garry,

    I got an update regarding this from our developers, and it seems like a common workflow with WP Checkup service as part of the security check. Unlike Defender plugin, WP Checkup in general doesn't have access to a websites file system to give an accurate scan.

    Since WP Checkup doesn't have internal insights on a website, the download is part of the security test we do to have deep insights to know the vulnerabilities against the site during a detailed checkup.

    I hope this helps. Please let us know if you have any further query. Have a great day ahead. :slight_smile:

    Best Regards,
    Nithin

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.