52.169.148.186 - - [21/Sep/2025:17:53:35 +0330] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:35 +0330] "GET /anan.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:35 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:36 +0330] "GET /acacia.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:36 +0330] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:36 +0330] "GET /folte.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:36 +0330] "GET /ssss.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:36 +0330] "GET /ho.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:37 +0330] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:37 +0330] "GET /get.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:37 +0330] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:37 +0330] "GET /ff2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:38 +0330] "GET /aa2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:38 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:38 +0330] "GET /filled.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:38 +0330] "GET /yes.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:39 +0330] "GET /network.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:39 +0330] "GET /img/dot.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:39 +0330] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:39 +0330] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:39 +0330] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:40 +0330] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:40 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:40 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:40 +0330] "GET /x1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:41 +0330] "GET /lite.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:41 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:41 +0330] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:41 +0330] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:42 +0330] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:42 +0330] "GET /build.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:42 +0330] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:42 +0330] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:42 +0330] "GET /xm.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:43 +0330] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:43 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:43 +0330] "GET /f3.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:43 +0330] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:44 +0330] "GET /az.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:44 +0330] "GET /ah.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:44 +0330] "GET /size.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:44 +0330] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:45 +0330] "GET /use.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:45 +0330] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:45 +0330] "GET /f1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:45 +0330] "GET /conn.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:46 +0330] "GET /yy.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:46 +0330] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:46 +0330] "GET /com.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:46 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:46 +0330] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:47 +0330] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:47 +0330] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:47 +0330] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:47 +0330] "GET /go.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:48 +0330] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:48 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:48 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:48 +0330] "GET /wp-includes/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:49 +0330] "GET /wp-content/upgrade/file.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:49 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:49 +0330] "GET /nf.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:49 +0330] "GET /es.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:49 +0330] "GET /0x0x.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:50 +0330] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:50 +0330] "GET /hook.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:50 +0330] "GET /oldy.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:50 +0330] "GET /xsox.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:51 +0330] "GET /eagle.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:51 +0330] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:51 +0330] "GET /te.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:51 +0330] "GET /haa.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:32 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:32 +0330] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:33 +0330] "GET /hk.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:33 +0330] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:33 +0330] "GET /granary.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:33 +0330] "GET /aa21.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:34 +0330] "GET /akk.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:34 +0330] "GET /alpa.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:34 +0330] "GET /finny.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [21/Sep/2025:17:53:34 +0330] "GET /aa18.php HTTP/1.1" 301 795 "-" "-" 72.167.33.20 - - [21/Sep/2025:18:11:18 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.3; rv:126.0) Gecko/20100101 Firefox/126.0" 162.14.210.15 - - [21/Sep/2025:18:25:07 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.147.3 - - [21/Sep/2025:18:55:36 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.39.19.49 - - [21/Sep/2025:20:07:45 +0330] "GET / HTTP/1.0" 301 795 "http://freecloudservices.ir/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 196.251.71.192 - - [21/Sep/2025:20:07:54 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 185.39.19.43 - - [21/Sep/2025:20:18:43 +0330] "GET / HTTP/1.0" 301 795 "http://freecloudservices.ir/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 169.150.203.235 - - [21/Sep/2025:20:47:05 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.225.50.88 - - [21/Sep/2025:21:44:28 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 191.104.225.238 - - [21/Sep/2025:22:51:36 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 YaBrowser/25.8.5.527.10 YaApp_iOS/2508.5 YaApp_iOS_Browser/2508.5 Safari/604.1 SA/3" 191.104.225.238 - - [21/Sep/2025:22:54:52 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 YaBrowser/25.8.5.527.10 YaApp_iOS/2508.5 YaApp_iOS_Browser/2508.5 Safari/604.1 SA/3" 69.167.32.96 - - [21/Sep/2025:22:57:16 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 YaBrowser/25.8.5.527.10 YaApp_iOS/2508.5 YaApp_iOS_Browser/2508.5 Safari/604.1 SA/3" 190.196.168.128 - - [21/Sep/2025:23:14:17 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 154.205.129.174 - - [21/Sep/2025:23:14:17 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 154.205.129.174 - - [21/Sep/2025:23:15:55 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1" 191.104.225.238 - - [21/Sep/2025:23:24:41 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:42 +0330] "GET /J1hLumdeDbk9RINaZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:53 +0330] "GET /3pWDUXYThREob7capt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:55 +0330] "GET /error_log HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:56 +0330] "GET /home HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:59 +0330] "GET /yaUWtJ86UXOygJBSu.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:00 +0330] "GET /y8AtWY5c2158k8MfVS.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 185.227.134.106 - - [21/Sep/2025:23:14:18 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 103.109.101.105 - - [21/Sep/2025:23:18:34 +0330] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:54 +0330] "GET /HgY0CO84FBXGLgw7US4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:24:58 +0330] "GET /shsspnwyl HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:01 +0330] "GET /Syng4bo3Kgyt0bVm7KI.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:08 +0330] "GET /AlMnTAhK0HxWPTzpd.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:21 +0330] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:22 +0330] "GET /9LPKTCHIBV3a_2BqV.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:23 +0330] "GET /rG0s0DC1fmmu_WcxCE.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:37 +0330] "GET /wA6JDyvHYauqQRy12Bz.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:38 +0330] "GET /.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:48 +0330] "GET /2nxx8xjL5sLj85Anl.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:52 +0330] "GET /alfa-rex.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:53 +0330] "GET /CsFVQDke9Gp9p3w9x.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:04 +0330] "GET /T9oIiQX_LCNhcKumhey.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:05 +0330] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:07 +0330] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:17 +0330] "GET /ioxi22.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:18 +0330] "GET /ioxi11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:19 +0330] "GET /goat11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:20 +0330] "GET /MDhfxe8ZkRU7XYQQw.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:21 +0330] "GET /sMSJRsidhS2gsaqoaL.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:32 +0330] "GET /wp-mail.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:42 +0330] "GET /TI85gMzIrYzTb8NxL.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:07 +0330] "GET /alexusMailer_v2.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:09 +0330] "GET /EeB7t3_7CvTwLivSIy.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:10 +0330] "GET /RTKeNMQaF6QdepWpfwq.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:50 +0330] "GET /RFIxySG0gSdVLXDo99.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:25:51 +0330] "GET /hDytj2oqreG8WL8fZv7.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:03 +0330] "GET /cM9Yo5CRl3EJn6dVQ4.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:22 +0330] "GET /l8Ch66jQLbNF3bvAVdD.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:26:52 +0330] "GET /L05XsssmeycgMtVXi7.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:07 +0330] "GET /OykX5RIE5UfAcbGozmO.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:10 +0330] "GET /Caterpillar.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:22 +0330] "GET /iisstart.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:23 +0330] "GET /9Sp9Pj4ThkJQsDB7K.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:24 +0330] "GET /61tpEhSng4c0yKWSNF.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:26 +0330] "GET /news_parser.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:27 +0330] "GET /1mndOpMorSVWVJ4Bd.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:37 +0330] "GET /le0e7RFGIc9O8ohdEX.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:54 +0330] "GET /.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:56 +0330] "GET /fTRnOGctkSjZsMxdYq.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:57 +0330] "GET /zFNyBIiyh4h1Z4Fq1Bx.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:02 +0330] "GET /socSIphomo5nN4yKeK5.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:03 +0330] "GET /tunnel.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:05 +0330] "GET /o54RMWoR7QW1MUl4v.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:06 +0330] "GET /JaervBuu2GEDqIugz_.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:08 +0330] "GET /spinstall0.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:09 +0330] "GET /msok.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:20 +0330] "GET /tunnel.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:25 +0330] "GET /7nJzU0MD94pME22ZUD1.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:55 +0330] "GET /rgpLbOQLEZC2t0Ta1.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:08 +0330] "GET /SdvGTO_ZaoA581QvA.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:09 +0330] "GET /HYz0l0pHYhTcZM2P28.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:26 +0330] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:38 +0330] "GET /page-login.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:49 +0330] "GET /cloud.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:54 +0330] "GET /S8HPMU8OT4C3GM9wv_.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:55 +0330] "GET /hDzaWyV2HKoSHXQzVZ0.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:56 +0330] "GET /view.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:58 +0330] "GET /AdNZzezaeUGH1QFRcX.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:15 +0330] "GET /idpost.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:27:58 +0330] "GET /.htaccess HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:27 +0330] "GET /readme.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:37 +0330] "GET /403.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:39 +0330] "GET /home.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:50 +0330] "GET /page-error-403.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:51 +0330] "GET /panelvanderpp.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:53 +0330] "GET /LBONwtsa5Bl_s1a8_.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:28:57 +0330] "GET /RFotuj63dfTAG06gV.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:00 +0330] "GET /o_6pWvW88QmvWSAhPHy.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:01 +0330] "GET /tunnel.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:11 +0330] "GET /USgGlWgJ1jtUkiKc_.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:12 +0330] "GET /JW9hu_qZfhOlsgJlBc.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:14 +0330] "GET /b3TDsNMh0S3xccuoBuj.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:18 +0330] "GET /favic0n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:21 +0330] "GET /Thumbs.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:24 +0330] "GET /_example.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:45 +0330] "GET /20170219.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:47 +0330] "GET /l0g.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:49 +0330] "GET /Heed.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:16 +0330] "GET /sw3.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:17 +0330] "GET /manager10.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:20 +0330] "GET /cmd-pro.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:22 +0330] "GET /greeting.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:23 +0330] "GET /one-lin.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:27 +0330] "GET /cmd-prow.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:28 +0330] "GET /xbin10x.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:29 +0330] "GET /dn.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:30 +0330] "GET /id_win.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:31 +0330] "GET /logos.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:41 +0330] "GET /shell.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:43 +0330] "GET /spacer.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:44 +0330] "GET /id.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:46 +0330] "GET /proxy-jsp.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:50 +0330] "GET /HelloHTML.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:51 +0330] "GET /HitCount.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:02 +0330] "GET /tunnel.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:21 +0330] "GET /hHqKxeXnagFQ0siYW.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:22 +0330] "GET /k0dJnU7woO6OVoMiH1.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:52 +0330] "GET /style.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:54 +0330] "GET /HelpSessions.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:55 +0330] "GET /preaproveWelcome.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:56 +0330] "GET /wm_cfshared.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:57 +0330] "GET /sql.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:29:58 +0330] "GET /welcome.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:00 +0330] "GET /upload.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:01 +0330] "GET /favicon.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:03 +0330] "GET /YBTApaS6ydwekt45p.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:09 +0330] "GET /I3GemdrjDGU1E9GuFo.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:10 +0330] "GET /1hC2EoGH1F9lusSPb9a.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:20 +0330] "GET /.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:24 +0330] "GET /B_9xHF0TQZI6b_V7rCk.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:25 +0330] "GET /.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:26 +0330] "GET /ilmCBNPrR7rTMVAA2.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:38 +0330] "GET /dW2qT_gdOEBP5_RxoT4.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:43 +0330] "GET /tunnel.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:44 +0330] "GET /3IRyM75s0DSJ4z7Um.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:01 +0330] "GET /RnKehnvCr_IvnoSJ4JL.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:03 +0330] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:05 +0330] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:07 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:08 +0330] "GET /accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:11 +0330] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:21 +0330] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:23 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:29 +0330] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:35 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:36 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:49 +0330] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:50 +0330] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:51 +0330] "GET /shlo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:55 +0330] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:58 +0330] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:01 +0330] "GET /unzip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:02 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:12 +0330] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:13 +0330] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:19 +0330] "GET /orvxmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:27 +0330] "GET /gAe6rQtJxSDg40tYKs.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:28 +0330] "GET /2pgNNuMdMdSFXV52xQO.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:30 +0330] "GET /font-awesome.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:31 +0330] "GET /ReF4Bxhv21LPPCzb0.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:30:32 +0330] "GET /2p92Mvqv6dFguZ4fSG.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:02 +0330] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:04 +0330] "GET /wpo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:09 +0330] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:10 +0330] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:24 +0330] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:37 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:48 +0330] "GET /alfanewditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:52 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:54 +0330] "GET /wpautoedit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:56 +0330] "GET /logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:31:57 +0330] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:00 +0330] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:26 +0330] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:38 +0330] "GET /db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:39 +0330] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:41 +0330] "GET /blackrock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 13.90.173.74 - - [21/Sep/2025:23:32:41 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 191.104.225.238 - - [21/Sep/2025:23:32:42 +0330] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 13.90.173.74 - - [21/Sep/2025:23:32:42 +0330] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:43 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "-" 191.104.225.238 - - [21/Sep/2025:23:32:43 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 13.90.173.74 - - [21/Sep/2025:23:32:43 +0330] "GET /wp-content/akp.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:43 +0330] "GET /wp-content/plugins/hanau/akc.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:44 +0330] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 191.104.225.238 - - [21/Sep/2025:23:32:44 +0330] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 13.90.173.74 - - [21/Sep/2025:23:32:44 +0330] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:44 +0330] "GET /wp-content/plugins/deu/ms.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:45 +0330] "GET /wp-content/plugins/view-ad/ms.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:45 +0330] "GET /wp-content/plugins/aafr/uploader.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:46 +0330] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:46 +0330] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:46 +0330] "GET /mass.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:47 +0330] "GET /plugins/kontol/wp-crom.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:47 +0330] "GET /wp-content/plugins/view-source/ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:47 +0330] "GET /wp-content/plugins/index-path.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:48 +0330] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:48 +0330] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:49 +0330] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:49 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:49 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:50 +0330] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:50 +0330] "GET /akc.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:50 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:51 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:51 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:52 +0330] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:52 +0330] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:52 +0330] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:53 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:53 +0330] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:54 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:54 +0330] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:54 +0330] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:55 +0330] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:55 +0330] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:55 +0330] "GET /w.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:56 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:56 +0330] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:56 +0330] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:57 +0330] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:57 +0330] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:58 +0330] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:58 +0330] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:58 +0330] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:59 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:59 +0330] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:32:59 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:00 +0330] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:00 +0330] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:00 +0330] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:01 +0330] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:01 +0330] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:01 +0330] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:02 +0330] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:02 +0330] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:03 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:03 +0330] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:03 +0330] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:04 +0330] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:04 +0330] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:04 +0330] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:05 +0330] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:05 +0330] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:05 +0330] "GET /ez.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:06 +0330] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:06 +0330] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:06 +0330] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:07 +0330] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:07 +0330] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:08 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:08 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:08 +0330] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:09 +0330] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:09 +0330] "GET /installer.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:09 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:10 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:10 +0330] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:10 +0330] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:11 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:11 +0330] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:11 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:12 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:12 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:13 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:13 +0330] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:13 +0330] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:14 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:14 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:14 +0330] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:15 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:15 +0330] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:15 +0330] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:16 +0330] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:16 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:16 +0330] "GET /post.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:17 +0330] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:17 +0330] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:18 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:18 +0330] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:18 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:19 +0330] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:19 +0330] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:19 +0330] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:20 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:20 +0330] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:20 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:21 +0330] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:21 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:21 +0330] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:22 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:22 +0330] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:23 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:23 +0330] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:23 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:24 +0330] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:24 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:24 +0330] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:25 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:25 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:25 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:26 +0330] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:26 +0330] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:26 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:27 +0330] "GET /mm.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:27 +0330] "GET /users.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:28 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:28 +0330] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:28 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:29 +0330] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:29 +0330] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:29 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:30 +0330] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:30 +0330] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:30 +0330] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 13.90.173.74 - - [21/Sep/2025:23:33:31 +0330] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 190.196.168.128 - - [21/Sep/2025:23:34:09 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:11 +0330] "GET /e5Fv6Xdiaf2DKvTsJ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:14 +0330] "GET /eGyz7mUQHIj8AmjtREE HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:15 +0330] "GET /error_log HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:18 +0330] "GET /shsspnwyl HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:22 +0330] "GET /BX_VI1Lb7avmFKRXvd.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:25 +0330] "GET /alexusMailer_v2.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:29 +0330] "GET /kkqMeXfdGaOarP8z4TD.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:37 +0330] "GET /xdIiE5LrF5fBB9k3yoE.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 191.104.225.238 - - [21/Sep/2025:23:32:25 +0330] "GET /wsoditz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:36 +0330] "GET /alfditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:37 +0330] "GET /db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:45 +0330] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 191.104.225.238 - - [21/Sep/2025:23:32:46 +0330] "GET /wsoditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 190.196.168.128 - - [21/Sep/2025:23:34:12 +0330] "GET /TEoZJsAlLOT3taXXvD HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:17 +0330] "GET /home HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:20 +0330] "GET /6ZzRMnMS5Z0E0IWw2.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:23 +0330] "GET /egh1sFj04tWo0trZwlt.0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:26 +0330] "GET /Oqu1KVkVqzFZogZHQ.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:28 +0330] "GET /ZbTj8c2XWELfvOuXOM.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:31 +0330] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:32 +0330] "GET /9P6_00FaxW8CKVeVP.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:35 +0330] "GET /Mg_7lNmaPj9qK0rNrQ.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:38 +0330] "GET /.LuFix-983426.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:40 +0330] "GET /hvcHtZla_IAnX7d_B.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:41 +0330] "GET /ZBO55WsjufHg_QvD9I.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:46 +0330] "GET /RbDz5lJOEZ28OxwYR.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:49 +0330] "GET /56TqDDf7PNw0ghGw0Gs.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:51 +0330] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:54 +0330] "GET /ioxi22.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:57 +0330] "GET /goat11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:03 +0330] "GET /wp-mail.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:06 +0330] "GET /Rgnxxg17GvvvHiy_Fs.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:11 +0330] "GET /aPk6aRmDrpSTdpN80.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:12 +0330] "GET /1_5G0EzhEfv3jzRJCa.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:15 +0330] "GET /spinstall0.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:17 +0330] "GET /msok.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:20 +0330] "GET /tunnel.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:23 +0330] "GET /OBhs12HUOX0skX9wB.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:25 +0330] "GET /THJPG_tlQmteEL4PRy.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:28 +0330] "GET /news_parser.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:30 +0330] "GET /qEQI_ogbkKBc0AAQb.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:31 +0330] "GET /PfkUvyBaCWys0qh8XD.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:43 +0330] "GET /xYRZgKuwXUradVGgbKY.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:44 +0330] "GET /alfa-rex.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:48 +0330] "GET /r7i2NsoJLbtC4C4La2.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:52 +0330] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:55 +0330] "GET /ioxi11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:34:58 +0330] "GET /qy88TzB4pQn3M4Ttf.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:00 +0330] "GET /8WcqAoZ2cnAZEuzQmI.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:02 +0330] "GET /MQL8VttxgJ9d25zAzGY.Php7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:05 +0330] "GET /QeV7XjSb9meHOva5O.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:08 +0330] "GET /ZGy7uQlFj6JqUIrTAku.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:09 +0330] "GET /tunnel.ashx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:14 +0330] "GET /NdjZT_Ko1OX3C9ahYgI.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:19 +0330] "GET /Caterpillar.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:22 +0330] "GET /iisstart.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:26 +0330] "GET /p7fWWJEfinAW8I4LInO.class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:37 +0330] "GET /R35ZsiIJMs5d4CMOIy.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:42 +0330] "GET /rQfABbU29kN6PQihd.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:33 +0330] "GET /ds4cOy7LEu1g5BFzK5W.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:34 +0330] "GET /.f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:36 +0330] "GET /gYnrcZi6tw7TeeRZS.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:39 +0330] "GET /veZ8aPzBuvb7r_u3NKw.htaccess HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:40 +0330] "GET /.htaccess HTTP/1.1" 403 787 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:43 +0330] "GET /lpcBqhmGa5bE5A8BAC.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:45 +0330] "GET /K1BvRITJtBsoSJvLYwz.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:48 +0330] "GET /readme.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:50 +0330] "GET /403.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:53 +0330] "GET /home.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:57 +0330] "GET /panelvanderpp.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:59 +0330] "GET /jyO8W9TAXUHInibxS.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:05 +0330] "GET /byD15zQ2wjx9dLkrm.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:11 +0330] "GET /EXJ1OFEO5j_lnAc0k.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:14 +0330] "GET /4MC6i5lr0ql1D_0d76N.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:16 +0330] "GET /idpost.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:18 +0330] "GET /sw3.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:46 +0330] "GET /index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:51 +0330] "GET /page-login.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:54 +0330] "GET /cloud.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:35:56 +0330] "GET /page-error-403.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:00 +0330] "GET /5TUjo6sEjLRlWePT6c.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:02 +0330] "GET /y5STD5vnFu2ZHo8Oblh.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:04 +0330] "GET /view.html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:07 +0330] "GET /KMM8zSHlX0Y8NvL6tg.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:08 +0330] "GET /RssokFM0_nsVS0jxXYj.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:10 +0330] "GET /tunnel.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:13 +0330] "GET /WCUemVQCa0dOAdD6lo.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:19 +0330] "GET /manager10.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:21 +0330] "GET /favic0n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:22 +0330] "GET /cmd-pro.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:27 +0330] "GET /one-lin.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:35 +0330] "GET /id_win.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:41 +0330] "GET /id.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:24 +0330] "GET /Thumbs.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:25 +0330] "GET /greeting.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:28 +0330] "GET /_example.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:30 +0330] "GET /cmd-prow.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:31 +0330] "GET /xbin10x.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:33 +0330] "GET /dn.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:36 +0330] "GET /logos.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:38 +0330] "GET /shell.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:39 +0330] "GET /spacer.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:42 +0330] "GET /20170219.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:45 +0330] "GET /l0g.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:52 +0330] "GET /style.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:01 +0330] "GET /upload.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:05 +0330] "GET /ER6IZflaYH1IgkXMz.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:08 +0330] "GET /wZ26wPPD3vVyinEXMyj.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:10 +0330] "GET /.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:13 +0330] "GET /gHKiuF6qP2TJPvuCTU.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:44 +0330] "GET /proxy-jsp.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:47 +0330] "GET /Heed.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:48 +0330] "GET /HelloHTML.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:50 +0330] "GET /HitCount.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:53 +0330] "GET /HelpSessions.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:55 +0330] "GET /preaproveWelcome.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:56 +0330] "GET /wm_cfshared.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:58 +0330] "GET /sql.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:36:59 +0330] "GET /welcome.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:02 +0330] "GET /favicon.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:04 +0330] "GET /tunnel.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:07 +0330] "GET /qU7UQxOWoUNl0PlHKC.login-n.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:12 +0330] "GET /GYYPPGhmjUIzNEGAk.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:15 +0330] "GET /KBPG01Ah1aE_ZSiMRdu.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:18 +0330] "GET /SKMwefpN9wgxn3DuJ.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:19 +0330] "GET /VeX6uT0EtX1POc9k1E.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:25 +0330] "GET /P6zUi9xWVuIElX4ZIG.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:16 +0330] "GET /.login-w.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:21 +0330] "GET /h_frzQ1Ru9fqdqe5lMH.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:22 +0330] "GET /font-awesome.max6.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:24 +0330] "GET /SpQkSBasZ5vwsSC3i.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:27 +0330] "GET /TVwyVKqsRbtmuSFQ2Zo.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:29 +0330] "GET /tunnel.nosocket.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:30 +0330] "GET /tBsEvThU7lvjrvYXH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:32 +0330] "GET /ECa9eZirM13ebw6k2C.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:33 +0330] "GET /Up1AKTxcmcQcQeTXIBN.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:36 +0330] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:38 +0330] "GET /wpo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:41 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:42 +0330] "GET /accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:47 +0330] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:48 +0330] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:51 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:53 +0330] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:54 +0330] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:56 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:57 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:59 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:00 +0330] "GET /alfanewditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:02 +0330] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:04 +0330] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:05 +0330] "GET /shlo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:11 +0330] "GET /logs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:18 +0330] "GET /unzip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:19 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:21 +0330] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:24 +0330] "GET /orvxmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:28 +0330] "GET /alfditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:30 +0330] "GET /db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:32 +0330] "GET /db_model.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:33 +0330] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:36 +0330] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:35 +0330] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:39 +0330] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:44 +0330] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:37:50 +0330] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:07 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:08 +0330] "GET /wpautoedit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:10 +0330] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:13 +0330] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:14 +0330] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:16 +0330] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:22 +0330] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:25 +0330] "GET /wsoditz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:27 +0330] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:35 +0330] "GET /blackrock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:47 +0330] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:49 +0330] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:50 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:53 +0330] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:38 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:39 +0330] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:41 +0330] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:42 +0330] "GET /wsoditz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:44 +0330] "GET /user-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:46 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:52 +0330] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:55 +0330] "GET /mmm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:00 +0330] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:04 +0330] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:06 +0330] "GET /orm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:15 +0330] "GET /search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:17 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:18 +0330] "GET /send.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:20 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:26 +0330] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:31 +0330] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:32 +0330] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:57 +0330] "GET /sym403bp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:38:58 +0330] "GET /fix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:01 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:03 +0330] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:09 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:10 +0330] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:12 +0330] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:13 +0330] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:22 +0330] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:23 +0330] "GET /Login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:25 +0330] "GET /userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:28 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:29 +0330] "GET /M3tri-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:34 +0330] "GET /settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:37 +0330] "GET /authorize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:39 +0330] "GET /stats.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:40 +0330] "GET /o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:36 +0330] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:42 +0330] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:43 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:47 +0330] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:48 +0330] "GET /owl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:50 +0330] "GET /system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:51 +0330] "GET /help.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:53 +0330] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:56 +0330] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:59 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:01 +0330] "GET /html.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:05 +0330] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:07 +0330] "GET /view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:12 +0330] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:18 +0330] "GET /xsox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:19 +0330] "GET /gdftps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:22 +0330] "GET /8phpactual.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:24 +0330] "GET /q1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:45 +0330] "GET /wso1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:54 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:39:57 +0330] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:02 +0330] "GET /framework.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:04 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:08 +0330] "GET /admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:10 +0330] "GET /caminho-ranger-32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:13 +0330] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:15 +0330] "GET /rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:16 +0330] "GET /wp-app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:21 +0330] "GET /onclickfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:32 +0330] "GET /header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:37 +0330] "GET /dashboard.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:40 +0330] "GET /creates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:41 +0330] "GET /caches.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:43 +0330] "GET /asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:44 +0330] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:46 +0330] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:48 +0330] "GET /sell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:49 +0330] "GET /ol.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:52 +0330] "GET /tempfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:55 +0330] "GET /tool.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:57 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:58 +0330] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:00 +0330] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:02 +0330] "GET /3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:06 +0330] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:08 +0330] "GET /7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:09 +0330] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:12 +0330] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:14 +0330] "GET /v3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:16 +0330] "GET /mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:17 +0330] "GET /v2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:19 +0330] "GET /js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:20 +0330] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:26 +0330] "GET /josettemagnusbriemerbonatti179RCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:27 +0330] "GET /adm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:29 +0330] "GET /library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:30 +0330] "GET /doiconvs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:33 +0330] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:35 +0330] "GET /logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:38 +0330] "GET /x7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:51 +0330] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:40:54 +0330] "GET /acxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:03 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:05 +0330] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:11 +0330] "GET /v.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:22 +0330] "GET /uadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:30 +0330] "GET /field.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:31 +0330] "GET /security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:33 +0330] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:34 +0330] "GET /symlnk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:36 +0330] "GET /asu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:23 +0330] "GET /uadm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:25 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:26 +0330] "GET /app.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:28 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:37 +0330] "GET /wp-register.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:42 +0330] "GET /zle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:44 +0330] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:45 +0330] "GET /ko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:39 +0330] "GET /wp-rss2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:41 +0330] "GET /basic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:50 +0330] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:56 +0330] "GET /v4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:00 +0330] "GET /retu1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:02 +0330] "GET /ulc6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:03 +0330] "GET /melumang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:05 +0330] "GET /last.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:06 +0330] "GET /owyak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:08 +0330] "GET /wp-admins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:09 +0330] "GET /owa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:11 +0330] "GET /config1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:13 +0330] "GET /1e3c8840f3cfa5199a03406ef731ea67RCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:20 +0330] "GET /data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:22 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:28 +0330] "GET /reset.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:30 +0330] "GET /antibot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:33 +0330] "GET /setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:36 +0330] "GET /engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:38 +0330] "GET /viewer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:47 +0330] "GET /admin-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:48 +0330] "GET /man.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:52 +0330] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:53 +0330] "GET /mai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:55 +0330] "GET /ini_user-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:41:58 +0330] "GET /retu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:14 +0330] "GET /send_email.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:16 +0330] "GET /list.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:17 +0330] "GET /auth.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:19 +0330] "GET /uploaded_script.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:24 +0330] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:25 +0330] "GET /tester.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:27 +0330] "GET /update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:32 +0330] "GET /visitor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:35 +0330] "GET /module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:39 +0330] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:41 +0330] "GET /clear.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:46 +0330] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:47 +0330] "GET /urun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:51 +0330] "GET /pending.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:55 +0330] "GET /completed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:59 +0330] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:00 +0330] "GET /las.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:02 +0330] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:03 +0330] "GET /options-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:05 +0330] "GET /mailler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:17 +0330] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:19 +0330] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:25 +0330] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:27 +0330] "GET /lc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:28 +0330] "GET /zfb45udoi45cp4epviresik.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:31 +0330] "GET /raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:34 +0330] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:36 +0330] "GET /wpx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:38 +0330] "GET /option.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:39 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:43 +0330] "GET /src.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:44 +0330] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:49 +0330] "GET /classfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:52 +0330] "GET /rotexmailer-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:54 +0330] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:42:57 +0330] "GET /ini_db-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:06 +0330] "GET /connects.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:08 +0330] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:09 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:11 +0330] "GET /psh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:13 +0330] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:14 +0330] "GET /php8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:16 +0330] "GET /u.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:20 +0330] "GET /ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:22 +0330] "GET /expect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:24 +0330] "GET /Wp-demand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:30 +0330] "GET /lf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:33 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:41 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:44 +0330] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:47 +0330] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:50 +0330] "GET /siteheads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:56 +0330] "GET /123.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:03 +0330] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:04 +0330] "GET /xl2024.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:06 +0330] "GET /Ova-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:07 +0330] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:09 +0330] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:10 +0330] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:14 +0330] "GET /9WOLF.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:15 +0330] "GET /bu4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:17 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:18 +0330] "GET /alexus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:20 +0330] "GET /webstand.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:21 +0330] "GET /mosala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:23 +0330] "GET /wpterm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:42 +0330] "GET /sym403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:45 +0330] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:49 +0330] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:52 +0330] "GET /newsletter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:53 +0330] "GET /uninstall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:55 +0330] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:43:58 +0330] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:00 +0330] "GET /test1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:01 +0330] "GET /1sis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:12 +0330] "GET /minishell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:26 +0330] "GET /csss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:27 +0330] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:29 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:31 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:32 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:35 +0330] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:37 +0330] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:40 +0330] "GET /cbnx1p6egi7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:24 +0330] "GET /soul.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:34 +0330] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:38 +0330] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:44 +0330] "GET /includes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:47 +0330] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:51 +0330] "GET /alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:53 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:58 +0330] "GET /akcc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:59 +0330] "GET /6295d66e37380c2c989945bbb9e0739dRCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:01 +0330] "GET /lock1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:04 +0330] "GET /PvqDq929BSx_A_D_M1n_a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:07 +0330] "GET /al.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:14 +0330] "GET /r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:16 +0330] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:22 +0330] "GET /wp-sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:25 +0330] "GET /index3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:28 +0330] "GET /2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:31 +0330] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:41 +0330] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:43 +0330] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:48 +0330] "GET /zebi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:50 +0330] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:54 +0330] "GET /ppxrlxvmbgs5osguf9dts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:44:56 +0330] "GET /include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:02 +0330] "GET /res.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:05 +0330] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:08 +0330] "GET /z.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:10 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:11 +0330] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:13 +0330] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:18 +0330] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:19 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:21 +0330] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:24 +0330] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:27 +0330] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:30 +0330] "GET /redirect.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:35 +0330] "GET /chtmlfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:36 +0330] "GET /b6d7075947e1f31e26a57397478b226eakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:38 +0330] "GET /check.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:39 +0330] "GET /rp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:41 +0330] "GET /_text-toggle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:42 +0330] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:44 +0330] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:45 +0330] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:47 +0330] "GET /am.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:50 +0330] "GET /defense.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:51 +0330] "GET /438bd8678657644bbecd39b496eb4fcdRCdefault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:53 +0330] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:58 +0330] "GET /zposfyhd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:59 +0330] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:01 +0330] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:02 +0330] "GET /4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:07 +0330] "GET /d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:33 +0330] "GET /wp-options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:48 +0330] "GET /akc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:54 +0330] "GET /0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:45:56 +0330] "GET /ORVX-VWkYqe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:04 +0330] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:05 +0330] "GET /cp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:08 +0330] "GET /get.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:12 +0330] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:15 +0330] "GET /anon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:17 +0330] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:18 +0330] "GET /q.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:20 +0330] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:21 +0330] "GET /y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:23 +0330] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:28 +0330] "GET /zz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:31 +0330] "GET /alwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:32 +0330] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:35 +0330] "GET /pro.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:11 +0330] "GET /inbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:14 +0330] "GET /tmp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:25 +0330] "GET /delcheck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:26 +0330] "GET /2020.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:29 +0330] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:34 +0330] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:37 +0330] "GET /saudi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:38 +0330] "GET /prevaricate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:46 +0330] "GET /dos2unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:47 +0330] "GET /wpyii2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:56 +0330] "GET /nuan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:58 +0330] "GET /clsleakdyzm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:01 +0330] "GET /PfNNkO7IX8o4Ct_vV.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:04 +0330] "GET /dChSkEqqlJ3xssnQHjr.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:05 +0330] "GET /wp-login.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:10 +0330] "GET /about.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:13 +0330] "GET /defaults.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:40 +0330] "GET /simple-backdoor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:41 +0330] "GET /302.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:43 +0330] "GET /antineutrino.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:44 +0330] "GET /402.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:50 +0330] "GET /tunnel.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:52 +0330] "GET /511.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:53 +0330] "GET /foxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:55 +0330] "GET /class-wp-text-diff-renderer-table.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:46:59 +0330] "GET /1975.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:02 +0330] "GET /hhCEa5qyRl8QkDMIYo.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:07 +0330] "GET /index.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:08 +0330] "GET /xmlrpc.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:12 +0330] "GET /install.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:15 +0330] "GET /wp-config.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:16 +0330] "GET /wp-trackback.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:21 +0330] "GET /xnnf8pTRT5wtPA_q1Y.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:22 +0330] "GET /EPpCS_UUw7wgKdoDO51.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:26 +0330] "GET /wp-login.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:27 +0330] "GET /wp-trackback.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:33 +0330] "GET /FP9ZkaWStmf_oGCx_.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:38 +0330] "GET /about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:41 +0330] "GET /ol.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:44 +0330] "GET /psm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:48 +0330] "GET /man.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:51 +0330] "GET /fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:52 +0330] "GET /t.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:54 +0330] "GET /shell.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:55 +0330] "GET /mailer.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:57 +0330] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:00 +0330] "GET /sts.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:01 +0330] "GET /TlSXkH51gryQMD9XI.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:04 +0330] "GET /aH4Ft6HQOQWiMJrolob.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:09 +0330] "GET /sell.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:11 +0330] "GET /fix.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:18 +0330] "GET /Mhbgf.php.malware HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:19 +0330] "GET /Dh0631VogjI_C1M7c.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:24 +0330] "GET /index.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:29 +0330] "GET /wso.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:30 +0330] "GET /Mhbgf.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:32 +0330] "GET /wp-config.php.suspected HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:35 +0330] "GET /MPUeMwjJ6I06PokNMe.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:36 +0330] "GET /QBfICXgSLuhRkMPY6z0.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:40 +0330] "GET /unzipper.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:43 +0330] "GET /bb.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:46 +0330] "GET /msleaf.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:49 +0330] "GET /sell.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:47:58 +0330] "GET /test.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:03 +0330] "GET /HXVeG3tqCSQlzsdSrD.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:06 +0330] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:08 +0330] "GET /mailer.php8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:25 +0330] "GET /uM1XG84h7wdmdhlMBnf.test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:12 +0330] "GET /THIR1ooAo87iXFL9x.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:14 +0330] "GET /Rvpj68T4EEKgDGfb24.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:15 +0330] "GET /lrt6gtVMcR0OM0oJP5j.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:17 +0330] "GET /mailer.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:19 +0330] "GET /man.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:20 +0330] "GET /fix.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:22 +0330] "GET /XPNQCstDt5_oS4Sin.test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:23 +0330] "GET /LYdZkk748sIQUrejzg.test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:26 +0330] "GET /.test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:28 +0330] "GET /3iKrTSCjbknQgk9J8.tmb HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:31 +0330] "GET /G4h9kqt3FqkyJnSThhH.tmb HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:34 +0330] "GET /CYaX1J4Hl4Abx9Hkm.tomcat.5.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:35 +0330] "GET /zzTXBQsAPsHmPb4D72.tomcat.5.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:37 +0330] "GET /uJhekCB7hNwjQWdMa_y.tomcat.5.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:43 +0330] "GET /RyLIxs383Pil0A0nDSB.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:45 +0330] "GET /buy.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:50 +0330] "GET /jHnP9FYyWjMuvikfzF.well-known HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:52 +0330] "GET /ub_ptDlfid3SI18EMJd.well-known HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:57 +0330] "GET /gdSU7fd1NuMOxKx_l3.xhtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:58 +0330] "GET /wxkaYfW8ECm5boupFnQ.xhtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:49:00 +0330] "GET /jsfshell.xhtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 209.38.173.77 - - [21/Sep/2025:23:49:40 +0330] "GET /.htaccess HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Mobile Safari/537.36" 174.138.115.87 - - [21/Sep/2025:23:49:41 +0330] "GET /.htaccess HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36" 190.196.168.128 - - [21/Sep/2025:23:48:29 +0330] "GET /QVTBewPwoHDBHLqqWH.tmb HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:32 +0330] "GET /.tmb HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:39 +0330] "GET /tunnel.tomcat.5.jsp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:40 +0330] "GET /8s9fCtT5Zi0SX1nNl.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:42 +0330] "GET /1Yhy4aS2OYRmCOugE6.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:46 +0330] "GET /readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:49 +0330] "GET /qJtKAqmpRiRTulxuW.well-known HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:54 +0330] "GET /.well-known HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:48:55 +0330] "GET /nRgyjnSIGl8KvvltK.xhtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1" 190.196.168.128 - - [21/Sep/2025:23:49:40 +0330] "GET /.htaccess HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 209.38.173.77 - - [21/Sep/2025:23:50:28 +0330] "GET /.htaccess HTTP/1.1" 403 787 "-" "Mozilla/5.0 (iPad; CPU OS 26_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Brave/1 Mobile/15E148 Safari/604.1" 209.38.173.77 - - [21/Sep/2025:23:51:02 +0330] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Mobile Safari/537.36" 31.214.174.196 - - [22/Sep/2025:00:00:52 +0330] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "get_local:DCV" 78.29.53.57 - - [22/Sep/2025:00:51:08 +0330] "GET / HTTP/1.0" 301 795 "http://mail.freecloudservices.ir/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36" 78.29.53.57 - - [22/Sep/2025:00:51:08 +0330] "GET / HTTP/1.0" 301 795 "http://mail.freecloudservice.ir/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36" 178.128.192.49 - - [22/Sep/2025:01:12:24 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 178.128.192.49 - - [22/Sep/2025:01:12:24 +0330] "GET /favicon.ico HTTP/1.1" 301 795 "http://freecloudservice.ir/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.234.19.115 - - [22/Sep/2025:01:32:46 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:47 +0330] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:47 +0330] "GET /wp-content/themes/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:47 +0330] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:48 +0330] "GET /wp-includes/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:48 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:49 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:49 +0330] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:50 +0330] "GET /fix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:50 +0330] "GET /flower.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:51 +0330] "GET /ax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:51 +0330] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:52 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:52 +0330] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:53 +0330] "GET /wpc.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:53 +0330] "GET /akcc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:53 +0330] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.115 - - [22/Sep/2025:01:32:54 +0330] "GET /fmk.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.191.153.221 - - [22/Sep/2025:04:59:16 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 54.81.67.100 - - [22/Sep/2025:04:59:18 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 3.142.148.10 - - [22/Sep/2025:04:59:16 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 66.249.74.73 - - [22/Sep/2025:04:59:16 +0330] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.74.73 - - [22/Sep/2025:04:59:17 +0330] "GET / HTTP/1.1" 301 795 "-" "GoogleOther" 52.34.76.65 - - [22/Sep/2025:04:59:29 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 223.244.35.77 - - [22/Sep/2025:05:50:57 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.195.19.194 - - [22/Sep/2025:06:01:49 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36" 205.169.39.43 - - [22/Sep/2025:06:02:34 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 176.100.243.133 - - [22/Sep/2025:05:52:49 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 149.88.19.18 - - [22/Sep/2025:05:58:44 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 191.96.67.227 - - [22/Sep/2025:06:06:01 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36" 45.79.42.132 - - [22/Sep/2025:06:16:37 +0330] "HEAD / HTTP/1.1" 301 0 "-" "Spider_Bot/3.0" 205.169.39.164 - - [22/Sep/2025:06:38:32 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.132 Safari/537.36" 43.157.52.37 - - [22/Sep/2025:06:39:45 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 207.102.138.19 - - [22/Sep/2025:06:51:36 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 207.102.138.19 - - [22/Sep/2025:06:56:55 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0" 192.30.83.42 - - [22/Sep/2025:06:59:13 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.2849.56" 194.225.50.88 - - [22/Sep/2025:07:00:26 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 93.158.70.111 - - [22/Sep/2025:07:00:51 +0330] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 192.121.134.92 - - [22/Sep/2025:07:00:51 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 196.251.86.9 - - [22/Sep/2025:07:12:15 +0330] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Redmi Y2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 79.209.34.159 - - [22/Sep/2025:07:14:31 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 79.221.109.212 - - [22/Sep/2025:07:14:35 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" 194.225.50.88 - - [22/Sep/2025:07:00:26 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 184.188.72.82 - - [22/Sep/2025:07:11:55 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/138.0.7204.156 Mobile/15E148 Safari/604.1" 52.11.171.106 - - [22/Sep/2025:07:14:16 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0" 64.124.27.90 - - [22/Sep/2025:07:14:30 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0" 79.221.109.212 - - [22/Sep/2025:07:14:33 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 79.209.34.159 - - [22/Sep/2025:07:14:37 +0330] "GET / HTTP/1.1" 301 795 "-" "Microsoft Office/15.0 (Windows NT 6.3; Microsoft Outlook 15.0.4771; Pro)" 79.221.109.212 - - [22/Sep/2025:07:14:38 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.15063; en-US) PowerShell/6.0.0" 90.187.238.157 - - [22/Sep/2025:07:26:47 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 192.30.83.54 - - [22/Sep/2025:07:15:39 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.2849.56" 27.4.22.122 - - [22/Sep/2025:07:21:35 +0330] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.2" 90.187.238.157 - - [22/Sep/2025:07:27:01 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 52.90.115.12 - - [22/Sep/2025:07:37:04 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 172.120.11.126 - - [22/Sep/2025:07:38:11 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 35.91.186.110 - - [22/Sep/2025:07:40:55 +0330] "HEAD /favicon.ico HTTP/1.1" 301 0 "-" "axios/1.8.4" 34.98.143.197 - - [22/Sep/2025:07:37:04 +0330] "HEAD / HTTP/1.1" 301 0 "http://www.freecloudservices.ir" "Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/112.0 Firefox/112.0 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 3.16.206.192 - - [22/Sep/2025:07:37:04 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.51" 196.251.70.47 - - [22/Sep/2025:07:37:05 +0330] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 45.84.107.33 - - [22/Sep/2025:07:38:17 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 83.175.118.162 - - [22/Sep/2025:07:48:27 +0330] "HEAD / HTTP/1.1" 301 0 "-" "-" 83.175.118.162 - - [22/Sep/2025:07:48:27 +0330] "GET / HTTP/1.1" 301 795 "-" "-" 45.146.55.184 - - [22/Sep/2025:07:50:57 +0330] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.146.55.184 - - [22/Sep/2025:07:50:57 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.146.55.184 - - [22/Sep/2025:07:50:58 +0330] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:50:58 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:50:58 +0330] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:50:58 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:50:58 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:50:59 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:50:59 +0330] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.146.55.184 - - [22/Sep/2025:07:50:59 +0330] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:50:59 +0330] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:50:59 +0330] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:50:59 +0330] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:00 +0330] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:00 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:00 +0330] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:00 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:00 +0330] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:01 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:01 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:01 +0330] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:01 +0330] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:01 +0330] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:01 +0330] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:02 +0330] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:02 +0330] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:02 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:02 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:02 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.146.55.184 - - [22/Sep/2025:07:51:03 +0330] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:03 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:03 +0330] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:03 +0330] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:03 +0330] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:03 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.146.55.184 - - [22/Sep/2025:07:51:04 +0330] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.146.55.184 - - [22/Sep/2025:07:51:04 +0330] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:04 +0330] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:04 +0330] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:04 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:05 +0330] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:05 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:05 +0330] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:05 +0330] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:05 +0330] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:05 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:06 +0330] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:06 +0330] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:06 +0330] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:06 +0330] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:06 +0330] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.146.55.184 - - [22/Sep/2025:07:51:06 +0330] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:07 +0330] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:07 +0330] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:07 +0330] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:07 +0330] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:07 +0330] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:08 +0330] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:08 +0330] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:08 +0330] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:08 +0330] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:08 +0330] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:08 +0330] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:09 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:09 +0330] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:09 +0330] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:09 +0330] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:09 +0330] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:10 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:10 +0330] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:10 +0330] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:10 +0330] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:10 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:10 +0330] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:11 +0330] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:11 +0330] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:11 +0330] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:11 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:11 +0330] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:12 +0330] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:12 +0330] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:12 +0330] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:12 +0330] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:12 +0330] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:12 +0330] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:13 +0330] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.146.55.184 - - [22/Sep/2025:07:51:13 +0330] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:13 +0330] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.146.55.184 - - [22/Sep/2025:07:51:13 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:13 +0330] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:13 +0330] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:14 +0330] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:14 +0330] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:14 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:14 +0330] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:14 +0330] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:15 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:15 +0330] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:15 +0330] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:15 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:15 +0330] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.146.55.184 - - [22/Sep/2025:07:51:15 +0330] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:16 +0330] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:16 +0330] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:16 +0330] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:16 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:16 +0330] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:17 +0330] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:17 +0330] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:17 +0330] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:17 +0330] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.146.55.184 - - [22/Sep/2025:07:51:17 +0330] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:17 +0330] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:18 +0330] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:18 +0330] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:18 +0330] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:18 +0330] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:18 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:18 +0330] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:19 +0330] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:19 +0330] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:19 +0330] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.146.55.184 - - [22/Sep/2025:07:51:19 +0330] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:19 +0330] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:20 +0330] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:20 +0330] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:20 +0330] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:20 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:20 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:20 +0330] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:21 +0330] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:21 +0330] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.146.55.184 - - [22/Sep/2025:07:51:21 +0330] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:21 +0330] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:21 +0330] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:21 +0330] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:22 +0330] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:22 +0330] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:22 +0330] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:22 +0330] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:22 +0330] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:23 +0330] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:23 +0330] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:23 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:23 +0330] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:23 +0330] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:23 +0330] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:24 +0330] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.146.55.184 - - [22/Sep/2025:07:51:24 +0330] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:24 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:24 +0330] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:24 +0330] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.146.55.184 - - [22/Sep/2025:07:51:25 +0330] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:25 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:25 +0330] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:25 +0330] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:25 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:25 +0330] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:26 +0330] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:26 +0330] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:26 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:26 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:26 +0330] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:26 +0330] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:27 +0330] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:27 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:27 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:27 +0330] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:27 +0330] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:28 +0330] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:28 +0330] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:28 +0330] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:28 +0330] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:28 +0330] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:28 +0330] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.146.55.184 - - [22/Sep/2025:07:51:29 +0330] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:29 +0330] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:29 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.146.55.184 - - [22/Sep/2025:07:51:29 +0330] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:29 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:29 +0330] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:30 +0330] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:30 +0330] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:30 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:30 +0330] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:30 +0330] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:31 +0330] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:31 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:31 +0330] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:31 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:31 +0330] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:32 +0330] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:32 +0330] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:32 +0330] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:32 +0330] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:32 +0330] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:32 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.146.55.184 - - [22/Sep/2025:07:51:33 +0330] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:33 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:33 +0330] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:33 +0330] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:33 +0330] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:33 +0330] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.146.55.184 - - [22/Sep/2025:07:51:34 +0330] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:34 +0330] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.146.55.184 - - [22/Sep/2025:07:51:34 +0330] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:34 +0330] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:34 +0330] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:35 +0330] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:35 +0330] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:35 +0330] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:35 +0330] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.146.55.184 - - [22/Sep/2025:07:51:35 +0330] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:36 +0330] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:36 +0330] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:36 +0330] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:36 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:36 +0330] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:36 +0330] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:37 +0330] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:37 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:37 +0330] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:37 +0330] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.146.55.184 - - [22/Sep/2025:07:51:37 +0330] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:38 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:38 +0330] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:38 +0330] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:38 +0330] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:38 +0330] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:38 +0330] "GET /.tmb/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:39 +0330] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:39 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:39 +0330] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:39 +0330] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:39 +0330] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:40 +0330] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:40 +0330] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:40 +0330] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:40 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:40 +0330] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:40 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:41 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:41 +0330] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:41 +0330] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:41 +0330] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.146.55.184 - - [22/Sep/2025:07:51:41 +0330] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:42 +0330] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:42 +0330] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:42 +0330] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:42 +0330] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:42 +0330] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:42 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:43 +0330] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.146.55.184 - - [22/Sep/2025:07:51:43 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:43 +0330] "GET /sallu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:43 +0330] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:43 +0330] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:43 +0330] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:44 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:44 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:44 +0330] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:44 +0330] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:44 +0330] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:45 +0330] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:45 +0330] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:45 +0330] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:45 +0330] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:45 +0330] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:45 +0330] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:46 +0330] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:46 +0330] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:46 +0330] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:46 +0330] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:46 +0330] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:47 +0330] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:47 +0330] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:47 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:47 +0330] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:47 +0330] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:47 +0330] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:48 +0330] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:48 +0330] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.146.55.184 - - [22/Sep/2025:07:51:48 +0330] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:48 +0330] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:48 +0330] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:49 +0330] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:49 +0330] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:49 +0330] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:49 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:49 +0330] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:49 +0330] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:50 +0330] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:50 +0330] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.146.55.184 - - [22/Sep/2025:07:51:50 +0330] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:50 +0330] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.146.55.184 - - [22/Sep/2025:07:51:50 +0330] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:51 +0330] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:51 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:51 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.146.55.184 - - [22/Sep/2025:07:51:51 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:51 +0330] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:51 +0330] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:52 +0330] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:52 +0330] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:52 +0330] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:52 +0330] "GET /thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.146.55.184 - - [22/Sep/2025:07:51:52 +0330] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:53 +0330] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:53 +0330] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:53 +0330] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:53 +0330] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:53 +0330] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:53 +0330] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:54 +0330] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.146.55.184 - - [22/Sep/2025:07:51:54 +0330] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:54 +0330] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:54 +0330] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.146.55.184 - - [22/Sep/2025:07:51:54 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:55 +0330] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:55 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:55 +0330] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:55 +0330] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:55 +0330] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.146.55.184 - - [22/Sep/2025:07:51:55 +0330] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:56 +0330] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:56 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:56 +0330] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:56 +0330] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.146.55.184 - - [22/Sep/2025:07:51:56 +0330] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"