IPs requesting same php code

Getting multiple repetitive requests to a PHP file doesn’t make the file malicious. The right way to find and delete malicious files is to use the malware scanner: https://wpcerber.com/wordpress-security-scanner/