20.190.74.184 - - [01/Sep/2025:16:03:09 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:10 +0330] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:10 +0330] "GET /mws.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:11 +0330] "GET /alf4.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:12 +0330] "GET /uwu2.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:12 +0330] "GET /tlkzy.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:13 +0330] "GET /tarlv.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:14 +0330] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:15 +0330] "GET /cfile.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:16 +0330] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:16 +0330] "GET /sao.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:17 +0330] "GET /ez.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:18 +0330] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:18 +0330] "GET /te.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:19 +0330] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:20 +0330] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:21 +0330] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:21 +0330] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:22 +0330] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:23 +0330] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:24 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:24 +0330] "GET /gold.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:25 +0330] "GET /super.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:26 +0330] "GET /co.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:27 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:27 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:28 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:29 +0330] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:29 +0330] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:30 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:31 +0330] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:31 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:32 +0330] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:33 +0330] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:34 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:34 +0330] "GET /file32.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:35 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:36 +0330] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:37 +0330] "GET /grav.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:37 +0330] "GET /0kb.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:38 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:39 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:40 +0330] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:40 +0330] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:41 +0330] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:42 +0330] "GET /users/info.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:43 +0330] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:43 +0330] "GET /past.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:44 +0330] "GET /update.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:45 +0330] "GET /php.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:46 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:46 +0330] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:47 +0330] "GET /status.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:48 +0330] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:48 +0330] "GET /word.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:49 +0330] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:50 +0330] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:50 +0330] "GET /wp-key.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:51 +0330] "GET /admin404.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:52 +0330] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:52 +0330] "GET /you.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:53 +0330] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:54 +0330] "GET /max.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:54 +0330] "GET /i.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:55 +0330] "GET /apply.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:56 +0330] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:57 +0330] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:57 +0330] "GET /run.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:58 +0330] "GET /payout.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:59 +0330] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:03:59 +0330] "GET /helper.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:00 +0330] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:01 +0330] "GET /history.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:01 +0330] "GET /TNT.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:02 +0330] "GET /sym.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:03 +0330] "GET /vbseo.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:04 +0330] "GET /minishell.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:04 +0330] "GET /node.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:05 +0330] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:06 +0330] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:07 +0330] "GET /heroku.php HTTP/1.1" 301 795 "-" "-" 20.190.74.184 - - [01/Sep/2025:16:04:07 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 217.154.70.176 - - [01/Sep/2025:16:58:42 +0330] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 217.154.70.176 - - [01/Sep/2025:16:59:43 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:35 +0330] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:31:36 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:36 +0330] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:36 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:36 +0330] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:36 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:37 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:37 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:37 +0330] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:31:37 +0330] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:38 +0330] "GET /fai.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:38 +0330] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:38 +0330] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:38 +0330] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:38 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:31:38 +0330] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:39 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:39 +0330] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:39 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:31:39 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:40 +0330] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:31:40 +0330] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:40 +0330] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:40 +0330] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:31:40 +0330] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:41 +0330] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:41 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:41 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:41 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:41 +0330] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:42 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:42 +0330] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:42 +0330] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:42 +0330] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:43 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:43 +0330] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:43 +0330] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:43 +0330] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:43 +0330] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:44 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:44 +0330] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:44 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:31:44 +0330] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:44 +0330] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:45 +0330] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:45 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:45 +0330] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:31:45 +0330] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:45 +0330] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:46 +0330] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:46 +0330] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:46 +0330] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:46 +0330] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:46 +0330] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:31:47 +0330] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:47 +0330] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:31:47 +0330] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:47 +0330] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:47 +0330] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:48 +0330] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:48 +0330] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:48 +0330] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:48 +0330] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:48 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:49 +0330] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:31:49 +0330] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:49 +0330] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:31:49 +0330] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:50 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:50 +0330] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:50 +0330] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:50 +0330] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:31:50 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:51 +0330] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:31:51 +0330] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:31:51 +0330] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:51 +0330] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:31:51 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:52 +0330] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:52 +0330] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:52 +0330] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:52 +0330] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:52 +0330] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:53 +0330] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:31:53 +0330] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:53 +0330] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:53 +0330] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:53 +0330] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:54 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:31:54 +0330] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:54 +0330] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:54 +0330] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:31:54 +0330] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:31:55 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:55 +0330] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:55 +0330] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:55 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:31:56 +0330] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:56 +0330] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:31:56 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:31:56 +0330] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:56 +0330] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:31:57 +0330] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:57 +0330] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:31:57 +0330] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:57 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:57 +0330] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:58 +0330] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:58 +0330] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:31:58 +0330] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:58 +0330] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:31:58 +0330] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:59 +0330] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:59 +0330] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:31:59 +0330] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:31:59 +0330] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:31:59 +0330] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:00 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:00 +0330] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:00 +0330] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:00 +0330] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:00 +0330] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:01 +0330] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:01 +0330] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:01 +0330] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:01 +0330] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:02 +0330] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:02 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:32:02 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:32:02 +0330] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:02 +0330] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:03 +0330] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:03 +0330] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:03 +0330] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:03 +0330] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:03 +0330] "GET /.well-known/pki-validation/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:04 +0330] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:04 +0330] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:04 +0330] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:04 +0330] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:04 +0330] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:05 +0330] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:05 +0330] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:05 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:05 +0330] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:05 +0330] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:06 +0330] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:06 +0330] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.57.37 - - [01/Sep/2025:19:32:06 +0330] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:06 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:07 +0330] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:07 +0330] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.57.37 - - [01/Sep/2025:19:32:07 +0330] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:07 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:07 +0330] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:08 +0330] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:08 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:08 +0330] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:08 +0330] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:32:08 +0330] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:09 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:09 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:09 +0330] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:09 +0330] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:09 +0330] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:10 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:10 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:10 +0330] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:32:10 +0330] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:10 +0330] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:11 +0330] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:11 +0330] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:11 +0330] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:11 +0330] "GET /wp-includes/BDKR28_nfbxj7ov.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:11 +0330] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:12 +0330] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:12 +0330] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:32:12 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:12 +0330] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:13 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:13 +0330] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:13 +0330] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:13 +0330] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:13 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:14 +0330] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:14 +0330] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:14 +0330] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:14 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:14 +0330] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:15 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:15 +0330] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:15 +0330] "GET /wp-admin/css/colors/modern/3eTB38lCsA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:15 +0330] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:15 +0330] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:16 +0330] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:16 +0330] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:16 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:16 +0330] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:16 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:17 +0330] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:17 +0330] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:17 +0330] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:17 +0330] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:18 +0330] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:18 +0330] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:18 +0330] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:18 +0330] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:18 +0330] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:19 +0330] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:19 +0330] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:19 +0330] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:32:19 +0330] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:19 +0330] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:20 +0330] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:20 +0330] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:20 +0330] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:20 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:20 +0330] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:21 +0330] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:21 +0330] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:21 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:21 +0330] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:21 +0330] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:22 +0330] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:22 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:22 +0330] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:22 +0330] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:22 +0330] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:23 +0330] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:23 +0330] "GET /.tmb/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:23 +0330] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:23 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:23 +0330] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:24 +0330] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:24 +0330] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:24 +0330] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:24 +0330] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:24 +0330] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:25 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:25 +0330] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:25 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:25 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:32:26 +0330] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:26 +0330] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:26 +0330] "GET /wp-admin/css/colors/ectoplasm/mKSJUaFdm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:26 +0330] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:26 +0330] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:27 +0330] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:27 +0330] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:27 +0330] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:32:27 +0330] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:32:27 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:28 +0330] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:28 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:32:28 +0330] "GET /sallu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:28 +0330] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:28 +0330] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:29 +0330] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:29 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:32:29 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:29 +0330] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:29 +0330] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:30 +0330] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:30 +0330] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:30 +0330] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:32:30 +0330] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:30 +0330] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:31 +0330] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:31 +0330] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:31 +0330] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:31 +0330] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:32 +0330] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:32 +0330] "GET /k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:32 +0330] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:32 +0330] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:32 +0330] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:33 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:33 +0330] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:33 +0330] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:33 +0330] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:33 +0330] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:34 +0330] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:34 +0330] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:34 +0330] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:34 +0330] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:34 +0330] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:35 +0330] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:35 +0330] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:35 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:35 +0330] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:35 +0330] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:36 +0330] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:36 +0330] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:36 +0330] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:36 +0330] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:36 +0330] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:37 +0330] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:37 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:37 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:32:37 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:38 +0330] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:38 +0330] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:38 +0330] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:38 +0330] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:38 +0330] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:39 +0330] "GET /thumbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:39 +0330] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:39 +0330] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:39 +0330] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:39 +0330] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:40 +0330] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:40 +0330] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:40 +0330] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:32:40 +0330] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:40 +0330] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:41 +0330] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:41 +0330] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:32:41 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:41 +0330] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:41 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:42 +0330] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:42 +0330] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:42 +0330] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:42 +0330] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:32:42 +0330] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:43 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:43 +0330] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:43 +0330] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:43 +0330] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:44 +0330] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:32:44 +0330] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:44 +0330] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:44 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:44 +0330] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:32:45 +0330] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:45 +0330] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:32:45 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:45 +0330] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:45 +0330] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:46 +0330] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:46 +0330] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:46 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:46 +0330] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:46 +0330] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:47 +0330] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:47 +0330] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:47 +0330] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:47 +0330] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:32:47 +0330] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:48 +0330] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:48 +0330] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:48 +0330] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:48 +0330] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:48 +0330] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:49 +0330] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:49 +0330] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:49 +0330] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:32:50 +0330] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:50 +0330] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:50 +0330] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:50 +0330] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.57.37 - - [01/Sep/2025:19:32:51 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:51 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:32:51 +0330] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:51 +0330] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:51 +0330] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:52 +0330] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:52 +0330] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:52 +0330] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:52 +0330] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:52 +0330] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:53 +0330] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:53 +0330] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:32:53 +0330] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:54 +0330] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:54 +0330] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:54 +0330] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:32:54 +0330] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:55 +0330] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:55 +0330] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:32:55 +0330] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:55 +0330] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:55 +0330] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:32:56 +0330] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:56 +0330] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:56 +0330] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:32:56 +0330] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:56 +0330] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:57 +0330] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:57 +0330] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:32:57 +0330] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:57 +0330] "GET /css/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:58 +0330] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:58 +0330] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:32:58 +0330] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:58 +0330] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:58 +0330] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:59 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:32:59 +0330] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:59 +0330] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:59 +0330] "GET /assets/sandi-amir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:32:59 +0330] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:00 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:00 +0330] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:00 +0330] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:33:00 +0330] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:00 +0330] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:33:01 +0330] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:01 +0330] "GET /.well-known/pki-validation/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:01 +0330] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:01 +0330] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:01 +0330] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:02 +0330] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:02 +0330] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:02 +0330] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:02 +0330] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:33:02 +0330] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:33:03 +0330] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:03 +0330] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:33:03 +0330] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:03 +0330] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:04 +0330] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:04 +0330] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:04 +0330] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:04 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:04 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:05 +0330] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:05 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:05 +0330] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:33:06 +0330] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:06 +0330] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:07 +0330] "GET /0byte.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:07 +0330] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:33:08 +0330] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:08 +0330] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:09 +0330] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:33:09 +0330] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:33:09 +0330] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:09 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:09 +0330] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:10 +0330] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:10 +0330] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:10 +0330] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:10 +0330] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:10 +0330] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:33:11 +0330] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:11 +0330] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:11 +0330] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:11 +0330] "GET /sim.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:11 +0330] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:12 +0330] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:12 +0330] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:12 +0330] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:33:12 +0330] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:12 +0330] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:33:13 +0330] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:13 +0330] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:33:13 +0330] "GET /wp-content/plugins/ubh/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:33:13 +0330] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:13 +0330] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:33:14 +0330] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:14 +0330] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:14 +0330] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:14 +0330] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:14 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:15 +0330] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:33:15 +0330] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:15 +0330] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:15 +0330] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:33:16 +0330] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:33:16 +0330] "GET /wp-content/maw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:16 +0330] "GET /wp-includes/ID3/rus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:16 +0330] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:16 +0330] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.57.37 - - [01/Sep/2025:19:33:17 +0330] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:17 +0330] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 138.199.57.37 - - [01/Sep/2025:19:33:17 +0330] "GET /system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:17 +0330] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:17 +0330] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:18 +0330] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:33:18 +0330] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:18 +0330] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:18 +0330] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:18 +0330] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 138.199.57.37 - - [01/Sep/2025:19:33:19 +0330] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:19 +0330] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:19 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:19 +0330] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:19 +0330] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:20 +0330] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:20 +0330] "GET /wp-content/plugins/erinyani/asasx.php.bak HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:33:20 +0330] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:20 +0330] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:21 +0330] "GET /wp-content/plugins/pwnd/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:21 +0330] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 138.199.57.37 - - [01/Sep/2025:19:33:21 +0330] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:21 +0330] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:21 +0330] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:22 +0330] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:22 +0330] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:22 +0330] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:22 +0330] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:22 +0330] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:23 +0330] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:23 +0330] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:33:23 +0330] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:23 +0330] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:23 +0330] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:24 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 138.199.57.37 - - [01/Sep/2025:19:33:24 +0330] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:24 +0330] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:24 +0330] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:24 +0330] "GET /sitemap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:25 +0330] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:25 +0330] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:25 +0330] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:25 +0330] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:25 +0330] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:33:26 +0330] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:26 +0330] "GET /js/WP-DIRCHECKEKdj.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:26 +0330] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:26 +0330] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:26 +0330] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:27 +0330] "GET /.well-known/acme-challenge/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:27 +0330] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:27 +0330] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:27 +0330] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:28 +0330] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:28 +0330] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:28 +0330] "GET /wp-includes/widgets/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 138.199.57.37 - - [01/Sep/2025:19:33:28 +0330] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:28 +0330] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:29 +0330] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:29 +0330] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:29 +0330] "GET /assets/11.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:29 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:29 +0330] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:30 +0330] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.57.37 - - [01/Sep/2025:19:33:30 +0330] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 138.199.57.37 - - [01/Sep/2025:19:33:30 +0330] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:30 +0330] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:30 +0330] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:31 +0330] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 138.199.57.37 - - [01/Sep/2025:19:33:31 +0330] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:31 +0330] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:31 +0330] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:31 +0330] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:32 +0330] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 138.199.57.37 - - [01/Sep/2025:19:33:32 +0330] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:32 +0330] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:32 +0330] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 138.199.57.37 - - [01/Sep/2025:19:33:32 +0330] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:33 +0330] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:33:33 +0330] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:33 +0330] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:33 +0330] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:34 +0330] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:34 +0330] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:33:34 +0330] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 138.199.57.37 - - [01/Sep/2025:19:33:34 +0330] "GET /wp-commentin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:34 +0330] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 138.199.57.37 - - [01/Sep/2025:19:33:34 +0330] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 138.199.57.37 - - [01/Sep/2025:19:33:35 +0330] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 138.199.57.37 - - [01/Sep/2025:19:33:35 +0330] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 138.199.57.37 - - [01/Sep/2025:19:33:35 +0330] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.88 - - [01/Sep/2025:19:33:47 +0330] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:48 +0330] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:49 +0330] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:50 +0330] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.88 - - [01/Sep/2025:19:33:50 +0330] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:33:50 +0330] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.88 - - [01/Sep/2025:19:33:50 +0330] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:33:50 +0330] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:33:51 +0330] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:51 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.88 - - [01/Sep/2025:19:33:51 +0330] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:51 +0330] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:51 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:52 +0330] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:52 +0330] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.88 - - [01/Sep/2025:19:33:52 +0330] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.88 - - [01/Sep/2025:19:33:52 +0330] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:53 +0330] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:53 +0330] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:53 +0330] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:53 +0330] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:53 +0330] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:54 +0330] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:54 +0330] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:54 +0330] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:33:54 +0330] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:54 +0330] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:33:55 +0330] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:55 +0330] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:55 +0330] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.88 - - [01/Sep/2025:19:33:55 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.88 - - [01/Sep/2025:19:33:56 +0330] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.88 - - [01/Sep/2025:19:33:56 +0330] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:56 +0330] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:56 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:56 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:57 +0330] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:33:57 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:33:57 +0330] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.88 - - [01/Sep/2025:19:33:57 +0330] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:57 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:33:58 +0330] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:33:58 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:33:58 +0330] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:58 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:33:59 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:59 +0330] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:59 +0330] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:33:59 +0330] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:33:59 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:00 +0330] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:00 +0330] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:00 +0330] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:00 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:00 +0330] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:01 +0330] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:01 +0330] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:01 +0330] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:01 +0330] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:02 +0330] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:02 +0330] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:02 +0330] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:02 +0330] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:02 +0330] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:03 +0330] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.88 - - [01/Sep/2025:19:34:03 +0330] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:03 +0330] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:34:03 +0330] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:34:04 +0330] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:04 +0330] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.88 - - [01/Sep/2025:19:34:04 +0330] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:04 +0330] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:04 +0330] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:05 +0330] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.88 - - [01/Sep/2025:19:34:05 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:05 +0330] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:05 +0330] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.88 - - [01/Sep/2025:19:34:05 +0330] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:06 +0330] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:06 +0330] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:06 +0330] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:06 +0330] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.88 - - [01/Sep/2025:19:34:07 +0330] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.88 - - [01/Sep/2025:19:34:07 +0330] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:07 +0330] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:07 +0330] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:07 +0330] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:08 +0330] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:08 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:34:08 +0330] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:34:08 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:08 +0330] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.88 - - [01/Sep/2025:19:34:09 +0330] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:09 +0330] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:09 +0330] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:09 +0330] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.88 - - [01/Sep/2025:19:34:10 +0330] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:10 +0330] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:10 +0330] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:10 +0330] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:10 +0330] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:11 +0330] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:11 +0330] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:11 +0330] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:11 +0330] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:12 +0330] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:12 +0330] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:12 +0330] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.88 - - [01/Sep/2025:19:34:12 +0330] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.88 - - [01/Sep/2025:19:34:12 +0330] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:13 +0330] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:13 +0330] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.88 - - [01/Sep/2025:19:34:13 +0330] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:13 +0330] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:34:13 +0330] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:14 +0330] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:14 +0330] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:14 +0330] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 37.19.211.88 - - [01/Sep/2025:19:34:14 +0330] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.88 - - [01/Sep/2025:19:34:14 +0330] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:15 +0330] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.88 - - [01/Sep/2025:19:34:15 +0330] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.88 - - [01/Sep/2025:19:34:15 +0330] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:15 +0330] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:16 +0330] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:16 +0330] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:16 +0330] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:16 +0330] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.88 - - [01/Sep/2025:19:34:16 +0330] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:17 +0330] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:17 +0330] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 37.19.211.88 - - [01/Sep/2025:19:34:17 +0330] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:17 +0330] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:18 +0330] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:18 +0330] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:18 +0330] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 37.19.211.88 - - [01/Sep/2025:19:34:18 +0330] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:18 +0330] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:19 +0330] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:19 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:19 +0330] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:19 +0330] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:19 +0330] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:20 +0330] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.88 - - [01/Sep/2025:19:34:20 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.88 - - [01/Sep/2025:19:34:20 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:20 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:21 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.88 - - [01/Sep/2025:19:34:21 +0330] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:21 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.88 - - [01/Sep/2025:19:34:21 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 37.19.211.88 - - [01/Sep/2025:19:34:21 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:22 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:22 +0330] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:22 +0330] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:22 +0330] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:23 +0330] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:23 +0330] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.88 - - [01/Sep/2025:19:34:23 +0330] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:23 +0330] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:23 +0330] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:24 +0330] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 37.19.211.88 - - [01/Sep/2025:19:34:24 +0330] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:24 +0330] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:24 +0330] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 37.19.211.88 - - [01/Sep/2025:19:34:24 +0330] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.88 - - [01/Sep/2025:19:34:25 +0330] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:25 +0330] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:25 +0330] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:25 +0330] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:26 +0330] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:26 +0330] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.88 - - [01/Sep/2025:19:34:26 +0330] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:26 +0330] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:26 +0330] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:27 +0330] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 37.19.211.88 - - [01/Sep/2025:19:34:27 +0330] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:27 +0330] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 37.19.211.88 - - [01/Sep/2025:19:34:27 +0330] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 37.19.211.88 - - [01/Sep/2025:19:34:27 +0330] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 37.19.211.88 - - [01/Sep/2025:19:34:28 +0330] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 37.19.211.88 - - [01/Sep/2025:19:34:28 +0330] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 37.19.211.88 - - [01/Sep/2025:19:34:28 +0330] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 37.19.211.88 - - [01/Sep/2025:19:34:28 +0330] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 37.19.211.88 - - [01/Sep/2025:19:34:29 +0330] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:29 +0330] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:29 +0330] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:29 +0330] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:29 +0330] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 37.19.211.88 - - [01/Sep/2025:19:34:30 +0330] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 170.106.143.6 - - [01/Sep/2025:19:59:17 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 92.119.36.116 - - [01/Sep/2025:21:09:30 +0330] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 92.119.36.156 - - [01/Sep/2025:21:09:35 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 92.119.36.154 - - [01/Sep/2025:21:09:36 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 92.119.36.154 - - [01/Sep/2025:21:09:37 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 92.119.36.154 - - [01/Sep/2025:21:09:38 +0330] "GET /doiconvs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 92.119.36.136 - - [01/Sep/2025:21:09:39 +0330] "GET /moddofuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 92.119.36.136 - - [01/Sep/2025:21:09:40 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 165.22.53.94 - - [01/Sep/2025:23:48:36 +0330] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0" 194.26.192.121 - - [02/Sep/2025:00:32:35 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.121 - - [02/Sep/2025:00:32:35 +0330] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.121 - - [02/Sep/2025:00:32:35 +0330] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.121 - - [02/Sep/2025:00:32:35 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 194.26.192.121 - - [02/Sep/2025:00:32:35 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.121 - - [02/Sep/2025:00:32:36 +0330] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.169.141.253 - - [02/Sep/2025:01:17:45 +0330] "GET /.alf.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:45 +0330] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:46 +0330] "GET /.well-known/about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:47 +0330] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:47 +0330] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:48 +0330] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:48 +0330] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:49 +0330] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:49 +0330] "GET /13k.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:50 +0330] "GET /87.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:50 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:51 +0330] "GET /about/Geforce.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:51 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:52 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:52 +0330] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:53 +0330] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:54 +0330] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:54 +0330] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:55 +0330] "GET /akc.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:55 +0330] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:56 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:56 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:57 +0330] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:57 +0330] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:58 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:58 +0330] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:17:59 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:00 +0330] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:00 +0330] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:01 +0330] "GET /blog/fw.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:01 +0330] "GET /bugz.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:02 +0330] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:02 +0330] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:03 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:04 +0330] "GET /class.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:04 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:04 +0330] "GET /composer.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:05 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:06 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:06 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:07 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:07 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:08 +0330] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:08 +0330] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:09 +0330] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:09 +0330] "GET /fix.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:10 +0330] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:10 +0330] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:11 +0330] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:11 +0330] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:12 +0330] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:12 +0330] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:13 +0330] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:13 +0330] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:14 +0330] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:14 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:15 +0330] "GET /h.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:15 +0330] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:16 +0330] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:16 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:17 +0330] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:17 +0330] "GET /infos.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:18 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:19 +0330] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:19 +0330] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:20 +0330] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:20 +0330] "GET /mini HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:21 +0330] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:21 +0330] "GET /mm.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:22 +0330] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:22 +0330] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:23 +0330] "GET /pages.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:24 +0330] "GET /php.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:24 +0330] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:25 +0330] "GET /pinfo.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:25 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:26 +0330] "GET /robots.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:27 +0330] "GET /rt.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:27 +0330] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:28 +0330] "GET /setup.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:28 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:29 +0330] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:30 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:30 +0330] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:31 +0330] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:31 +0330] "GET /users.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:32 +0330] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:32 +0330] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:33 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:33 +0330] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:34 +0330] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:34 +0330] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:35 +0330] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:35 +0330] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:36 +0330] "GET /wp-admin/includes/header.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:36 +0330] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:37 +0330] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:38 +0330] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:38 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:39 +0330] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:39 +0330] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:40 +0330] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:40 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:41 +0330] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:41 +0330] "GET /wp-admin/wp-admins.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:42 +0330] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:42 +0330] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:43 +0330] "GET /wp-api.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:43 +0330] "GET /wp-comments.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:44 +0330] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:44 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:45 +0330] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:45 +0330] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:46 +0330] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:46 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:47 +0330] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:47 +0330] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:48 +0330] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:48 +0330] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:49 +0330] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:49 +0330] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:50 +0330] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:50 +0330] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:51 +0330] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:51 +0330] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:52 +0330] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:52 +0330] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:53 +0330] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:53 +0330] "GET /wp-error.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:54 +0330] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:54 +0330] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:55 +0330] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:56 +0330] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:56 +0330] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:57 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:57 +0330] "GET /wp-logs.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:58 +0330] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:58 +0330] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:18:59 +0330] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:00 +0330] "GET /wp-wso.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:00 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:01 +0330] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:01 +0330] "GET /wsa.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:01 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:02 +0330] "GET /y.php HTTP/1.1" 301 795 "-" "-" 52.169.141.253 - - [02/Sep/2025:01:19:02 +0330] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 34.244.74.61 - - [02/Sep/2025:01:25:57 +0330] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 4.230.4.106 - - [02/Sep/2025:01:41:24 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:26 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:27 +0330] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:28 +0330] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:29 +0330] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:29 +0330] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:30 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:31 +0330] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:32 +0330] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:33 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:34 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:35 +0330] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:36 +0330] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:37 +0330] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:38 +0330] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.230.4.106 - - [02/Sep/2025:01:41:39 +0330] "GET /error.php HTTP/1.1" 301 795 "-" "-" 197.3.135.73 - - [02/Sep/2025:04:49:02 +0330] "HEAD / HTTP/1.1" 301 0 "-" "-" 196.251.117.231 - - [02/Sep/2025:05:12:57 +0330] "GET /about.php?action=p&api=p&path=p&token= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.31.17 - - [02/Sep/2025:05:22:08 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.81.132.152 - - [02/Sep/2025:08:45:09 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.157.147.3 - - [02/Sep/2025:11:09:43 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"