Error log showing this

Code (Text):

2020/07/23 05:43:22 [error] 33676#33676: *40156 access forbidden by rule, client: 108.162.215.196, server: DOAMIN.COM, request: "GET /wp-content/plugins/uploadify/readme.txt HTTP/1.1"
, host: "DOAMIN.COM", referrer: "http://www.google.com/"
2020/07/23 05:46:26 [error] 33676#33676: *40187 access forbidden by rule, client: 172.69.35.39, server: DOAMIN.COM, request: "GET /wp-content/plugins/reflex-gallery/admin/scripts/File
Uploader/php.php HTTP/1.1", host: "DOAMIN.COM", referrer: "http://www.google.com/"
2020/07/23 05:49:13 [error] 33676#33676: *40200 access forbidden by rule, client: 172.69.35.85, server: DOAMIN.COM, request: "GET /wp-content/plugins/mailcwp/mailcwp-upload.php HTTP/1
.1", host: "DOAMIN.COM", referrer: "http://www.google.com/"
2020/07/23 05:51:25 [error] 33676#33676: *40211 access forbidden by rule, client: 172.69.34.174, server: DOAMIN.COM, request: "GET /wp-content/plugins/uploadify/includes/check.php HTT
P/1.1", host: "DOAMIN.COM", referrer: "http://www.google.com/"

---

the tips looks Cloudflare (maybe I missed doing the Cloudflare real IP?)

the most important thing I don't have these plugins, is this kind of searching for vulnarbilities?