���Root Mod By V1rus_Alfa
User / IP
:
216.73.217.78
Host / Server
:
195.214.235.115 / npln.ir
System
:
Linux damavand.pws-dns.net 5.14.0-503.35.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Apr 4 05:23:43 EDT 2025 x86_64
Command
|
Upload
|
Mass Deface
|
Create
:
/
home2
/
cutunixc
/
access-logs
/
Viewing: dasterang.app.cutunix.com
195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/6KXDJ4F0YW2G0H5OG-MXWHPYILCE38H_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/V723LITDLFXCRJEYI_WQ5QH86P8EPJSA HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/XBBPU7V6YUU3D38U082PKC3BOTX3FP4R HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/H5_U444HJ8E8HL1E_B68UNWCL797LS-S HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/PACIV_1B41EBM47XE6XOIVLJ2QKQOQXF HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/I-4QQ3QNG9SQMI6NJZQ4YQ3IOXKJK-WN HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/S122NKHRP0QJUT2B0KS_YKG-K3QPZ9M_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/ITOA1S9MBH-C3UUA1L04GXH-LT6OHDF9 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:16:44:04 +0330] "GET /.well-known/acme-challenge/ZIFL3IMN6Z6QY2HQMLYBOSD5AA3W181D HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 194.5.83.98 - - [07/Jan/2026:16:52:26 +0330] "GET /manager.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:52:27 +0330] "GET /bless.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:52:27 +0330] "GET /O-Simple.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:52:28 +0330] "GET /lock360.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:28 +0330] "GET /zwso.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:52:28 +0330] "GET /chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:29 +0330] "GET /about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:29 +0330] "GET /admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:30 +0330] "GET /.well-known/login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:52:30 +0330] "GET /mah.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:30 +0330] "GET /.wp/wso.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:52:31 +0330] "GET /core.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:52:31 +0330] "GET /robots.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:32 +0330] "GET /inputs.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:52:32 +0330] "GET /mini.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:52:33 +0330] "GET /goods.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:33 +0330] "GET /file5.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:33 +0330] "GET /ahax.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:34 +0330] "GET /f35.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:52:34 +0330] "GET /simple.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:52:35 +0330] "GET /update/f35.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:35 +0330] "GET /wp-content/hello.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:36 +0330] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:36 +0330] "GET /themes/zMousse/otuz1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:36 +0330] "GET /wp-content/edit-wolf.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:37 +0330] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:52:37 +0330] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:52:38 +0330] "GET /images/upload.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:52:38 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:38 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:39 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:39 +0330] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:40 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:40 +0330] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:40 +0330] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:41 +0330] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:41 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:42 +0330] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:42 +0330] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:52:43 +0330] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:43 +0330] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:52:43 +0330] "GET /classwithtostring.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:44 +0330] "GET /uploads/94056-upload.phtml HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:52:44 +0330] "GET /index/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:52:45 +0330] "GET /tinyfilemanager.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:52:45 +0330] "GET /js/bas.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:45 +0330] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:46 +0330] "GET /file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:52:46 +0330] "GET /wp-includes/js/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:52:47 +0330] "GET /wp-content/upgrade/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:47 +0330] "GET /buy.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:52:47 +0330] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:48 +0330] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:48 +0330] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:49 +0330] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:49 +0330] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:49 +0330] "GET /admin/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:50 +0330] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:50 +0330] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:51 +0330] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:51 +0330] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:52:51 +0330] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:52:52 +0330] "GET /files/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:52:52 +0330] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:53 +0330] "GET /inc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:52:53 +0330] "GET /wp-content/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:54 +0330] "GET /filemanager.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:52:54 +0330] "GET /cgi-bin/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:54 +0330] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:52:55 +0330] "GET /wp-includes/IXR/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:55 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:56 +0330] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:56 +0330] "GET /function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:52:56 +0330] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:52:57 +0330] "GET /wp-signup.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:52:57 +0330] "GET /wp-admin/network/network.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:58 +0330] "GET /admin/upload/css.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:58 +0330] "GET /wp-blog.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:52:59 +0330] "GET /wp-admin/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:52:59 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:52:59 +0330] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:53:00 +0330] "GET /wp-l0gin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:00 +0330] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:01 +0330] "GET /new.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:53:01 +0330] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:53:02 +0330] "GET /wp-includes/defaults.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:02 +0330] "GET /images/DJP9.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:02 +0330] "GET /wp-includes/customize/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:03 +0330] "GET /wp-admin/shell20211028.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:03 +0330] "GET /natural.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:04 +0330] "GET /item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:04 +0330] "GET /function/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:05 +0330] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:05 +0330] "GET /wp-admin/images/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:05 +0330] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:06 +0330] "GET /about/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:53:06 +0330] "GET /wp-includes/Requests/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:07 +0330] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:07 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:07 +0330] "GET /wp-content/languages/404.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:08 +0330] "GET /update/403.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:53:08 +0330] "GET /default.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:09 +0330] "GET /wp-includes/assets/info.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:09 +0330] "GET /wp-includes/class.api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:53:09 +0330] "GET /wp-includes/fonts/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:10 +0330] "GET /wp-admin/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:10 +0330] "GET /autoload_classmap/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:53:11 +0330] "GET /dropdown.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:11 +0330] "GET /images/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:12 +0330] "GET /db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:12 +0330] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:12 +0330] "GET /mah/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:13 +0330] "GET /wp-content/plugins/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:13 +0330] "GET /wp-includes/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:14 +0330] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:14 +0330] "GET /wp-admin/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:14 +0330] "GET /templates/beez3/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:15 +0330] "GET /wp-admin/js/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:15 +0330] "GET /install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:16 +0330] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:16 +0330] "GET /images/class-config.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:16 +0330] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:17 +0330] "GET /templates/beez/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:17 +0330] "GET /bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:18 +0330] "GET /class.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:18 +0330] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:19 +0330] "GET /wp-content/product.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:19 +0330] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:19 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:20 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:20 +0330] "GET /css/css.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:21 +0330] "GET /init.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:53:21 +0330] "GET /wp-admin/user/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:21 +0330] "GET /autoload_classmap/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:53:22 +0330] "GET /wp-includes/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:22 +0330] "GET /assets/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:53:23 +0330] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:23 +0330] "GET /wp-content/uploads/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:23 +0330] "GET /css/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:53:24 +0330] "GET /adminfuns.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:24 +0330] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:25 +0330] "GET /wp_wlx.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:25 +0330] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:25 +0330] "GET /wp-includes/assets/husky301.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:26 +0330] "GET /wp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:26 +0330] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:27 +0330] "GET /wp-content/themes/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:27 +0330] "GET /wp-header.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:28 +0330] "GET /wp-content/themes/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:28 +0330] "GET /Marvins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:28 +0330] "GET /wp-content/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:29 +0330] "GET /wp-class.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:29 +0330] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:30 +0330] "GET /xx.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:30 +0330] "GET /autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:31 +0330] "GET /wp-includes/classwithtostring.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:31 +0330] "GET /wp-content/blue.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:31 +0330] "GET /content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:53:32 +0330] "GET /wp-content/uploads/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:32 +0330] "GET /wp-admin/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:53:33 +0330] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:33 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:53:33 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:53:34 +0330] "GET /wp-content/plugins/up/main.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:53:34 +0330] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:35 +0330] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:35 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:36 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:36 +0330] "GET /images/images/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:36 +0330] "GET /images/class.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:37 +0330] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:37 +0330] "GET /web.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:38 +0330] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:38 +0330] "GET /images/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:38 +0330] "GET /wp-content/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:39 +0330] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:39 +0330] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:53:40 +0330] "GET /wp-trackback.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:53:40 +0330] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:41 +0330] "GET /radio.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:41 +0330] "GET /wp-admin/mah.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:53:41 +0330] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:42 +0330] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:53:42 +0330] "GET /wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:43 +0330] "GET /wp-setup.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:53:43 +0330] "GET /ms-themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:53:43 +0330] "GET /wp-includes/assets/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:53:44 +0330] "GET /style.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:44 +0330] "GET /wp-includes/infi.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:45 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:45 +0330] "GET /x.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:45 +0330] "GET /wp-includes/IXR/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:46 +0330] "GET /css/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:46 +0330] "GET /images/index22.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:47 +0330] "GET /wp-user.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:47 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:48 +0330] "GET /wp-includes/pomo/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:48 +0330] "GET /config.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:48 +0330] "GET /special.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:49 +0330] "GET /assets/script.js.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:49 +0330] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:53:50 +0330] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:50 +0330] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:53:50 +0330] "GET /wp-content/uploads/wp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:51 +0330] "GET /wp-includes/certificates/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:51 +0330] "GET /cgi-bin/class.api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:52 +0330] "GET /wp-content/cache/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:52 +0330] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:52 +0330] "GET /wp-includes/edit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:53 +0330] "GET /webdb.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:53 +0330] "GET /assets/images/doc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:53:54 +0330] "GET /file2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:53:54 +0330] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:55 +0330] "GET /alfa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:55 +0330] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:55 +0330] "GET /wp-includes/click.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:56 +0330] "GET /.well-known/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:53:56 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:57 +0330] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:57 +0330] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:57 +0330] "GET /wp-admin/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:58 +0330] "GET /edit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:58 +0330] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:59 +0330] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:53:59 +0330] "GET /wp-links-opml.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:53:59 +0330] "GET /wp-admin/user/network.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:00 +0330] "GET /atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:00 +0330] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:01 +0330] "GET /wp-includes/xl2023.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:01 +0330] "GET /wp-includes/certificates/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:02 +0330] "GET /wp-includes/images/media/dog.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:02 +0330] "GET /xp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:54:03 +0330] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:03 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:03 +0330] "GET /wp-links.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:04 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:04 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:54:05 +0330] "GET /wp-includes/ID3/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:05 +0330] "GET /wp-includes/pomo/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:05 +0330] "GET /wp-includes/IXR/security.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:06 +0330] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.98 - - [07/Jan/2026:16:54:06 +0330] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:07 +0330] "GET /wp-content/plugins/hello.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:07 +0330] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:07 +0330] "GET /wp-includes/fonts/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:08 +0330] "GET /moon.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:08 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:09 +0330] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:09 +0330] "GET /webadmin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:10 +0330] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:10 +0330] "GET /wp-admin/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:10 +0330] "GET /xl2023.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:54:11 +0330] "GET /go.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:11 +0330] "GET /wp-admin/xleet.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:12 +0330] "GET /templates/beez3/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:12 +0330] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:12 +0330] "GET /.well-known/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:13 +0330] "GET /wp-includes/assets/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:54:13 +0330] "GET /cgi-bin/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:54:14 +0330] "GET /wp-content/uploads/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:14 +0330] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:14 +0330] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:15 +0330] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:15 +0330] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:54:16 +0330] "GET /warm.PhP7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:54:16 +0330] "GET /wp-admin/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:54:17 +0330] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:17 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:17 +0330] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:18 +0330] "GET /blog/wp-content/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:18 +0330] "GET /hehehehe.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:19 +0330] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:19 +0330] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:54:19 +0330] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:20 +0330] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:54:20 +0330] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:21 +0330] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:21 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:21 +0330] "GET /wp-includes/Requests/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:22 +0330] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:22 +0330] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:23 +0330] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:54:23 +0330] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:24 +0330] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:24 +0330] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:24 +0330] "GET /wp-includes/images/media/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:25 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:54:25 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:26 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:26 +0330] "GET /wp-admin/maint/themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:26 +0330] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:27 +0330] "GET /wp-includes/fonts/themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:54:27 +0330] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:28 +0330] "GET /wp-includes/certificates/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:54:28 +0330] "GET /byp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:28 +0330] "GET /blog/wp-includes/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:29 +0330] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:29 +0330] "GET /blog/wp-admin/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:30 +0330] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:30 +0330] "GET /wp-includes/css/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:31 +0330] "GET /cgi-bin/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:31 +0330] "GET /wp-content/wso.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:31 +0330] "GET /class.api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:54:32 +0330] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:54:32 +0330] "GET /wp-content/radio.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:33 +0330] "GET /system_log.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:54:33 +0330] "GET /.alf.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:33 +0330] "GET /wso.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:34 +0330] "GET /wp-includes/blocks/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:34 +0330] "GET /flower.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:54:35 +0330] "GET /wp-includes/wp-class.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:35 +0330] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:35 +0330] "GET /wp-content/1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:36 +0330] "GET /ioxi-o.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:36 +0330] "GET /info.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:37 +0330] "GET /setup.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:37 +0330] "GET /.bod/.ll/ss.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:37 +0330] "GET /.well-known/radio.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:38 +0330] "GET /wp-content/plugin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:38 +0330] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:54:39 +0330] "GET /as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:54:39 +0330] "GET /cc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:40 +0330] "GET /.well-known/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:40 +0330] "GET /ab.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:40 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:41 +0330] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:54:41 +0330] "GET /doc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:42 +0330] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:42 +0330] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:43 +0330] "GET /wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:43 +0330] "GET /mar.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:43 +0330] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:54:44 +0330] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:44 +0330] "GET /1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:45 +0330] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:45 +0330] "GET /wp-includes/style-engine/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:54:45 +0330] "GET /js/fm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:54:46 +0330] "GET /wp-admin/images/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:54:46 +0330] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:47 +0330] "GET /wp-content/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:47 +0330] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:47 +0330] "GET /fm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:48 +0330] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:48 +0330] "GET /adminfuns.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:49 +0330] "GET /wp-admin/images/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:49 +0330] "GET /ini.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:54:50 +0330] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:50 +0330] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:50 +0330] "GET /admin/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:51 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:54:51 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:52 +0330] "GET /wp-admin/js/instaall.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:52 +0330] "GET /wp-includes/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:52 +0330] "GET /wp-includes/plugins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:54:53 +0330] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:53 +0330] "GET /wp-content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:54 +0330] "GET /wp-includes/css/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:54 +0330] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:55 +0330] "GET /wp-admin/network/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:54:56 +0330] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:54:57 +0330] "GET /customize.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:58 +0330] "GET /license.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:59 +0330] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:54:59 +0330] "GET /lock.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:00 +0330] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:55:00 +0330] "GET /wp-includes/atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:01 +0330] "GET /wp-includes/rest-api/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:01 +0330] "GET /.well-known/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:01 +0330] "GET /.well-known/wincust.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:02 +0330] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:02 +0330] "GET /wp-good.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:03 +0330] "GET /wp-includes/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:03 +0330] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:03 +0330] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:04 +0330] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:04 +0330] "GET /randkeyword.PhP7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:05 +0330] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:05 +0330] "GET /fonts/database.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:05 +0330] "GET /ff2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:06 +0330] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:06 +0330] "GET /wp-admin/plugin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:07 +0330] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:07 +0330] "GET /jp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.98 - - [07/Jan/2026:16:55:08 +0330] "GET /wp-atom.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:08 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:08 +0330] "GET /up.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:55:09 +0330] "GET /wp-content/uploads/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:09 +0330] "GET /assets/images/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:10 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:10 +0330] "GET /js/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:10 +0330] "GET /simple/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:55:11 +0330] "GET /worm.PhP HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:11 +0330] "GET /ext.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:12 +0330] "GET /delpaths.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.98 - - [07/Jan/2026:16:55:12 +0330] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:55:12 +0330] "GET /wp-includes/bk/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:55:13 +0330] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:55:13 +0330] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:14 +0330] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:14 +0330] "GET /gifclass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:15 +0330] "GET /plugin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:15 +0330] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:15 +0330] "GET /update-core.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:55:16 +0330] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:16 +0330] "GET /wp-mail.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:17 +0330] "GET /wp-content/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:17 +0330] "GET /wp-admin/defaults.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:17 +0330] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:18 +0330] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:18 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:19 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:19 +0330] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:19 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:20 +0330] "GET /assets/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:20 +0330] "GET /aa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:21 +0330] "GET /index2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:21 +0330] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:21 +0330] "GET /wp-admin/network/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:22 +0330] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:22 +0330] "GET /wp-content/languages/plugins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:55:23 +0330] "GET /shell.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:55:23 +0330] "GET /.well-known/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:55:24 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:55:24 +0330] "GET /wp-admin/network/atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:24 +0330] "GET /.well-known/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:25 +0330] "GET /hehe.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:25 +0330] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:26 +0330] "GET /css/slider.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:26 +0330] "GET /dir.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:55:26 +0330] "GET /wp-includes/css/atomlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:27 +0330] "GET /wp-content/style.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:27 +0330] "GET /libraries/phpmailer/updates.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:28 +0330] "GET /nf_tracking.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:28 +0330] "GET /wp-admin/css/about.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:29 +0330] "GET /filefuns.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:29 +0330] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:29 +0330] "GET /l.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:30 +0330] "GET /repeater.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:30 +0330] "GET /wp-admin/wso.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:31 +0330] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:31 +0330] "GET /contacts.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:31 +0330] "GET /wsa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:32 +0330] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:32 +0330] "GET /firewall.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:55:33 +0330] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:33 +0330] "GET /wp-content/uploads/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:33 +0330] "GET /lv.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:34 +0330] "GET /images/js1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:34 +0330] "GET /wp-admin/maint/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:35 +0330] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:35 +0330] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:36 +0330] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:36 +0330] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:36 +0330] "GET /wp-admin/theme-editor.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:37 +0330] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:37 +0330] "GET /wp-admin/maint/wonder.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:38 +0330] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:38 +0330] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:38 +0330] "GET /tox.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:39 +0330] "GET /wp-content/languages/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:39 +0330] "GET /wp-includes/js/dist/default.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:40 +0330] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:55:40 +0330] "GET /tiny.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:41 +0330] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:41 +0330] "GET /themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:41 +0330] "GET /wp-themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:55:42 +0330] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:42 +0330] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.98 - - [07/Jan/2026:16:55:43 +0330] "GET /mariju.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:43 +0330] "GET /waf_defender.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:43 +0330] "GET /wp-admin/maint/cong.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.98 - - [07/Jan/2026:16:55:44 +0330] "GET /av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:44 +0330] "GET /wp-admin/css/glex.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:45 +0330] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:45 +0330] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:45 +0330] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:46 +0330] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:46 +0330] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:47 +0330] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:47 +0330] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:55:48 +0330] "GET /theme.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:48 +0330] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:48 +0330] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:49 +0330] "GET /Simple.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:55:49 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:55:50 +0330] "GET /wp-admin/1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:50 +0330] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:50 +0330] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:51 +0330] "GET /.well-known/classwithtostring.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:51 +0330] "GET /css/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:52 +0330] "GET /images/waf_defender.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:52 +0330] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:52 +0330] "GET /small.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:53 +0330] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:53 +0330] "GET /NewFile.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:55:54 +0330] "GET /wp-content/uploads/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:54 +0330] "GET /error.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:55 +0330] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:55 +0330] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:55:55 +0330] "GET /wp-content/languages/themes/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:56 +0330] "GET /wp-files.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:56 +0330] "GET /functions.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:57 +0330] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:55:57 +0330] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:55:57 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:58 +0330] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:55:58 +0330] "GET /aks.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:55:59 +0330] "GET /litespeed.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:55:59 +0330] "GET /img/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:56:00 +0330] "GET /wp-includes/class-feed-index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:56:00 +0330] "GET /wpn.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.98 - - [07/Jan/2026:16:56:00 +0330] "GET /wp-content/classwithtostring.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:56:01 +0330] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:01 +0330] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:56:02 +0330] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:56:02 +0330] "GET /wp-includes/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:56:02 +0330] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:56:03 +0330] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:56:03 +0330] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:56:04 +0330] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:04 +0330] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:05 +0330] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:56:05 +0330] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:56:05 +0330] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:56:06 +0330] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:06 +0330] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:56:07 +0330] "GET /fog/management/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:07 +0330] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:56:07 +0330] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:08 +0330] "GET /images/wp-aespa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:08 +0330] "GET /wp-includes/Text/options.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:09 +0330] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:56:09 +0330] "GET /wp-content/upgrade/cc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:09 +0330] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:10 +0330] "GET /anonse/lock360.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:56:10 +0330] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:56:11 +0330] "GET /wp-admin/includes/class_api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.98 - - [07/Jan/2026:16:56:11 +0330] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:12 +0330] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:12 +0330] "GET /wp-admin/css/wp-css.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:12 +0330] "GET /.well-known/save.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:13 +0330] "GET /wp-includes/feed-rsss.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.98 - - [07/Jan/2026:16:56:13 +0330] "GET /wp-includes/IXR/goto.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.98 - - [07/Jan/2026:16:56:14 +0330] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:14 +0330] "GET /uploads/af32.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.98 - - [07/Jan/2026:16:56:14 +0330] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:15 +0330] "GET /Sanskrit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:15 +0330] "GET /wp-fmfile.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:16 +0330] "GET /.trash7309/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.98 - - [07/Jan/2026:16:56:16 +0330] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:16 +0330] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:56:17 +0330] "GET /memberfuns.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:17 +0330] "GET /infos.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.98 - - [07/Jan/2026:16:56:18 +0330] "GET /modules/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:56:18 +0330] "GET /wp-content/x.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.98 - - [07/Jan/2026:16:56:19 +0330] "GET /wp-content/wp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:19 +0330] "GET /options-writing.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:19 +0330] "GET /options-reading.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:20 +0330] "GET /wsad.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.98 - - [07/Jan/2026:16:56:20 +0330] "GET /nation.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.98 - - [07/Jan/2026:16:56:21 +0330] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.98 - - [07/Jan/2026:16:56:21 +0330] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.98 - - [07/Jan/2026:16:56:21 +0330] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:22 +0330] "GET /autoload_classmap/wso.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:22 +0330] "GET /wp-atomx.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.98 - - [07/Jan/2026:16:56:23 +0330] "GET /admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:56:24 +0330] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:25 +0330] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:56:25 +0330] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:56:25 +0330] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:26 +0330] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:56:26 +0330] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:56:27 +0330] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:56:27 +0330] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:27 +0330] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:28 +0330] "GET /css/media-widget-vide02.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:28 +0330] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:56:29 +0330] "GET /images/buy.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:29 +0330] "GET /templates/beez3/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:29 +0330] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:56:30 +0330] "GET /wp-admin/css/colors/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:56:30 +0330] "GET /plugins/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:56:31 +0330] "GET /.well-known/header.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:56:31 +0330] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:56:32 +0330] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:32 +0330] "GET /autoload_classmap/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:32 +0330] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:56:33 +0330] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:56:33 +0330] "GET /wp-content/uploads/anas.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:56:34 +0330] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:34 +0330] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:34 +0330] "GET /wp-includes/Text/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:35 +0330] "GET /xex.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:56:35 +0330] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:35 +0330] "GET /wp-includes/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:36 +0330] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:56:36 +0330] "GET /upload/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:37 +0330] "GET /wp-head.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:37 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:56:37 +0330] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:56:38 +0330] "GET /makeasmtp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:38 +0330] "GET /wp-includes/wp-sup.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:39 +0330] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:56:39 +0330] "GET /images/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:56:40 +0330] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:40 +0330] "GET /wp-content/edit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:56:40 +0330] "GET /.well-known/info.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:41 +0330] "GET /wp-content/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:56:41 +0330] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:41 +0330] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:42 +0330] "GET /xp.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:42 +0330] "GET /wp-content/languages/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:43 +0330] "GET /wp-content/bypass_1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:56:43 +0330] "GET /wp-admin/js/elementskit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:56:43 +0330] "GET /admin/user_data.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:44 +0330] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:56:44 +0330] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:45 +0330] "GET /click.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:56:45 +0330] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:56:45 +0330] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:46 +0330] "GET /wp-admin/css/colors/error.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:56:46 +0330] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:47 +0330] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:47 +0330] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:56:47 +0330] "GET /wp-admin/maint/repairs.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:56:48 +0330] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:48 +0330] "GET /wp-admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:56:49 +0330] "GET /wp-header.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:56:49 +0330] "GET /file.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:56:49 +0330] "GET /.tmb/doc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:50 +0330] "GET /wp-editor.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:50 +0330] "GET /wp-includes/style-engine-session.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:50 +0330] "GET /images/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:51 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:51 +0330] "GET /adminfusm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:56:52 +0330] "GET /js/js1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:52 +0330] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:56:52 +0330] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:53 +0330] "GET /images/habhan.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:56:53 +0330] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:54 +0330] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:54 +0330] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:54 +0330] "GET /about/function.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:55 +0330] "GET /routes/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:55 +0330] "GET /wp-includes/images/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:56 +0330] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:56 +0330] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:57 +0330] "GET /f35_SpaceTn.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:57 +0330] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:56:57 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:58 +0330] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:58 +0330] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:56:58 +0330] "GET /wp-includes/category-double.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:56:59 +0330] "GET /wp-admin/maint/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:56:59 +0330] "GET /blog/signatur.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:57:00 +0330] "GET /wp-includes/assets/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:00 +0330] "GET /wp-includes/widgets/security.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:01 +0330] "GET /include/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:01 +0330] "GET /gm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:57:01 +0330] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:02 +0330] "GET /js/content-type.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:02 +0330] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:57:03 +0330] "GET /about/goods.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:03 +0330] "GET /file/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:03 +0330] "GET /function/goods.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:04 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:04 +0330] "GET /wp-content/upgrade/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:04 +0330] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:05 +0330] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:05 +0330] "GET /plugin-install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:06 +0330] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:57:06 +0330] "GET /wp-admin/js/load.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:06 +0330] "GET /images/firewall.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:07 +0330] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:07 +0330] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:08 +0330] "GET /wp-includes/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:08 +0330] "GET /wp-content/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:08 +0330] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:09 +0330] "GET /wp-includes/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:09 +0330] "GET /wp-includes/customize/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:10 +0330] "GET /css/fan.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:10 +0330] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:10 +0330] "GET /images/mah.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:11 +0330] "GET /wp-content/waf_defender.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:11 +0330] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:12 +0330] "GET /wp-content/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:57:12 +0330] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:12 +0330] "GET /wp-content/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:57:13 +0330] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:13 +0330] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:13 +0330] "GET /wp-includes/rk2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:14 +0330] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:57:14 +0330] "GET /.well-known/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:57:15 +0330] "GET /b.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:15 +0330] "GET /wp-includes/certificates/past.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:16 +0330] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:16 +0330] "GET /css/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:16 +0330] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:17 +0330] "GET /wp-includes/edit-tags.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:17 +0330] "GET /wsax.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:17 +0330] "GET /bless.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:18 +0330] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:57:18 +0330] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:57:19 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:19 +0330] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:19 +0330] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:20 +0330] "GET /wp-content/plugins/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:20 +0330] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:57:21 +0330] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:21 +0330] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:21 +0330] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:22 +0330] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:22 +0330] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:23 +0330] "GET /wp-admin/js/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:23 +0330] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:23 +0330] "GET /uploads/xsec.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:24 +0330] "GET /images/Marvins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:24 +0330] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:25 +0330] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:57:25 +0330] "GET /wp-content/languages/radio.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:25 +0330] "GET /wp-content/uploads/fileman.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:26 +0330] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:26 +0330] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:26 +0330] "GET /admin.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:27 +0330] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:57:27 +0330] "GET /wp-admin/maint/byps.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:28 +0330] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:57:28 +0330] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:28 +0330] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:29 +0330] "GET /wp-admin/network/class.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:29 +0330] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:30 +0330] "GET /wp-includes/ms-file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:30 +0330] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:31 +0330] "GET /wp-includes/widgets/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:31 +0330] "GET /images/news_event/1.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:31 +0330] "GET /chosen.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:32 +0330] "GET /bs1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:57:32 +0330] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:33 +0330] "GET /wp-includes/network.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:33 +0330] "GET /page.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:57:33 +0330] "GET /wp-admin/includes/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:57:34 +0330] "GET /wp-content/uploads/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:34 +0330] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:35 +0330] "GET /wp-content/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:35 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:35 +0330] "GET /assets/info.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:36 +0330] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:36 +0330] "GET /wp-includes/pomo/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:57:36 +0330] "GET /wp-content/1.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:37 +0330] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:37 +0330] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:38 +0330] "GET /wp-includes/assets/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:38 +0330] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:57:38 +0330] "GET /wp-admin/css/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:57:39 +0330] "GET /images/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:57:39 +0330] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:40 +0330] "GET /x/test.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:40 +0330] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:40 +0330] "GET /wp-admin/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:41 +0330] "GET /wp-admin/css/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:57:41 +0330] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:42 +0330] "GET /ws.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:42 +0330] "GET /wp-includes/rest-api/1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:57:42 +0330] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:43 +0330] "GET /shop.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:43 +0330] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:44 +0330] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:44 +0330] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:44 +0330] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:45 +0330] "GET /wp-admin/user/header.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:45 +0330] "GET /wp-includes/IXR/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:46 +0330] "GET /wp-api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:46 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:46 +0330] "GET /css.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:47 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:47 +0330] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:57:48 +0330] "GET /wp-includes/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:57:48 +0330] "GET /images/fm.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:48 +0330] "GET /wp-includes/count.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:49 +0330] "GET /wp-error_log.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:49 +0330] "GET /assets/class_update_plugins.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:57:49 +0330] "GET /wp-admin/network/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:50 +0330] "GET /templates/beez5/error.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:50 +0330] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:51 +0330] "GET /js/firewall.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:51 +0330] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:52 +0330] "GET /assets/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:52 +0330] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:52 +0330] "GET /images/stories/themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:53 +0330] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:53 +0330] "GET /wp-includes/firewall.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:53 +0330] "GET /home/O-Simple.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:54 +0330] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:54 +0330] "GET /wp-includes/vars-soap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:55 +0330] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:57:55 +0330] "GET /style.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:55 +0330] "GET /files.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:56 +0330] "GET /wp-content/themes/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:56 +0330] "GET /wp-admin/css/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:57:57 +0330] "GET /saka.phP7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:57:57 +0330] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:57 +0330] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:58 +0330] "GET /baxa1.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:58 +0330] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:57:59 +0330] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:57:59 +0330] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:57:59 +0330] "GET /blog.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:00 +0330] "GET /about/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:00 +0330] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:01 +0330] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:01 +0330] "GET /images/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:01 +0330] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:02 +0330] "GET /js/mrx.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:58:02 +0330] "GET /wp-includes/colour.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:58:03 +0330] "GET /elp.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:03 +0330] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:58:03 +0330] "GET /wp-includes/images/include.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:04 +0330] "GET /wp-content/themes/av.php.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:04 +0330] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:58:05 +0330] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:05 +0330] "GET /upload/bilder/cong.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:05 +0330] "GET /fonts/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:06 +0330] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:06 +0330] "GET /entrepreneuse.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:06 +0330] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:07 +0330] "GET /wp-includes/assets/about5.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:58:07 +0330] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:08 +0330] "GET /wp-content/cong.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:58:08 +0330] "GET /js/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:58:08 +0330] "GET /.well-known/buy.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:09 +0330] "GET /index/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:58:09 +0330] "GET /wp-includes/ID3/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:58:10 +0330] "GET /function/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:58:10 +0330] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:10 +0330] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:11 +0330] "GET /testt.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:11 +0330] "GET /wp-content/uploads/goods.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:12 +0330] "GET /wp-admin/js/sad.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:12 +0330] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:12 +0330] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:58:13 +0330] "GET /web/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:13 +0330] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:14 +0330] "GET /network.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:14 +0330] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:14 +0330] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:15 +0330] "GET /wikindex.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:15 +0330] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:16 +0330] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:16 +0330] "GET /wp-includes/css/dist/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:16 +0330] "GET /wp-content/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:17 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:58:17 +0330] "GET /wp-includes/js/simi.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:18 +0330] "GET /wp-admin/images/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:18 +0330] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:18 +0330] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:19 +0330] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:19 +0330] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:20 +0330] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:20 +0330] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:20 +0330] "GET /wp-admin/css/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:58:21 +0330] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:58:21 +0330] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:21 +0330] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:22 +0330] "GET /wp-content/alam.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:22 +0330] "GET /css/adminfusm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:23 +0330] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:23 +0330] "GET /wp-content/raw.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:23 +0330] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:24 +0330] "GET /wp-admin/includes/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:24 +0330] "GET /wp-includes/customize/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:25 +0330] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:58:25 +0330] "GET /wp-admin/media-new.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:25 +0330] "GET /media-new.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:26 +0330] "GET /js/class_api.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:26 +0330] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:27 +0330] "GET /admin/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:27 +0330] "GET /wp-includes/plugin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:27 +0330] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:28 +0330] "GET /wp-admin/js/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:28 +0330] "GET /pages.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:29 +0330] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:29 +0330] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:29 +0330] "GET /uploads/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:30 +0330] "GET /assets/js/doc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:30 +0330] "GET /assets/comfunctions.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:58:31 +0330] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:31 +0330] "GET /css/adminfus.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:31 +0330] "GET /adminfus.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:32 +0330] "GET /wp-includes/css/litespeed.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:32 +0330] "GET /images/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:33 +0330] "GET /wp-admin/setup-config.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:33 +0330] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:33 +0330] "GET /cong.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:34 +0330] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:34 +0330] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:35 +0330] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:35 +0330] "GET /css/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:35 +0330] "GET /assets/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:36 +0330] "GET /autoload_classmap/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:36 +0330] "GET /wp-configs.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:37 +0330] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:37 +0330] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:37 +0330] "GET /wp-admin/network/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:38 +0330] "GET /wp-admin/item.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:38 +0330] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:39 +0330] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:39 +0330] "GET /wp-includes/ID3/shell.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:39 +0330] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:40 +0330] "GET /ms-users.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:40 +0330] "GET /wp-admin/js/cc.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:40 +0330] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:58:41 +0330] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:58:41 +0330] "GET /css/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:42 +0330] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:16:58:42 +0330] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:42 +0330] "GET /assets/content.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:43 +0330] "GET /fm.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:43 +0330] "GET /wp-content/goods.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:44 +0330] "GET /wp-includes/wp-2019.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:58:44 +0330] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:44 +0330] "GET /assets/images/cloud.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:45 +0330] "GET /wp-includes/log.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:45 +0330] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:58:46 +0330] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:46 +0330] "GET /wp-includes/aw.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:46 +0330] "GET /update/gely.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:47 +0330] "GET /uploads/c99shell.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:47 +0330] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:58:48 +0330] "GET /uploads/lala.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:48 +0330] "GET /wp-includes/IXR/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:58:48 +0330] "GET /wp-includes/css/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:49 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:58:49 +0330] "GET /top.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:50 +0330] "GET /wp-includes/css/dist/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:50 +0330] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:50 +0330] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:58:51 +0330] "GET /wp-content/click.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:51 +0330] "GET /wp-includes/template-less.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:52 +0330] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:52 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:52 +0330] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:53 +0330] "GET /retu11.PhP7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:58:53 +0330] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:54 +0330] "GET /wp-admin/css/elementskit.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:54 +0330] "GET /js/1.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:54 +0330] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:55 +0330] "GET /wp-includes/assets/min.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:55 +0330] "GET /wp-includes/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:55 +0330] "GET /backup/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:58:56 +0330] "GET /wp-content/uploads/uploads.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:56 +0330] "GET /wp-includes/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:57 +0330] "GET /wp-content/themes.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:57 +0330] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:58:57 +0330] "GET /worm0.PhP7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:58:58 +0330] "GET /wp-includes/load.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:58:58 +0330] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:58:59 +0330] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:58:59 +0330] "GET /images/c99.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:58:59 +0330] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:00 +0330] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:00 +0330] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:59:01 +0330] "GET /setup-config.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:01 +0330] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:02 +0330] "GET /wp-content/uploads/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:02 +0330] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:02 +0330] "GET /type.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:03 +0330] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:59:03 +0330] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:59:03 +0330] "GET /as/function.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:04 +0330] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:04 +0330] "GET /wp-admin/maint/flex.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:05 +0330] "GET /css/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:05 +0330] "GET /css/hekokstyle.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:05 +0330] "GET /wp-admin/user/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:06 +0330] "GET /files/shares/403ws.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:06 +0330] "GET /goat.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:07 +0330] "GET /images/fix.php7 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:07 +0330] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:07 +0330] "GET /files.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:08 +0330] "GET /wp-includes/assets/system.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:08 +0330] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:59:09 +0330] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:09 +0330] "GET /images/file.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:09 +0330] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:10 +0330] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:10 +0330] "GET /wp-includes/ID3/simi.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:59:11 +0330] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:59:11 +0330] "GET /img/chat-search.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:11 +0330] "GET /wp-includes/css/dist/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:12 +0330] "GET /wp-includes/js/dist/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:16:59:12 +0330] "GET /wp-includes/assets/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:13 +0330] "GET /wp-includes/sitemaps/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:13 +0330] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:13 +0330] "GET /wp-includes/l10n/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:14 +0330] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:14 +0330] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:59:15 +0330] "GET /wp-includes/blocks/file/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:59:15 +0330] "GET /wp-includes/images/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:15 +0330] "GET /wp-includes/block-bindings/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:16 +0330] "GET /wp-content/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:16 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:17 +0330] "GET /wp-admin/network/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:17 +0330] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:17 +0330] "GET /wp-includes/theme-compat/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:18 +0330] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:18 +0330] "GET /wp-includes/id3/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:19 +0330] "GET /wp-includes/blocks/query/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:19 +0330] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:19 +0330] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:20 +0330] "GET /wp-includes/blocks/group/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:59:20 +0330] "GET /blog/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:20 +0330] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:21 +0330] "GET /wp-includes/interactivity-api/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:21 +0330] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:22 +0330] "GET /wp-content/upgrade/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:22 +0330] "GET /wp-admin/js/dist/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:22 +0330] "GET /assets/css/dist/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:16:59:23 +0330] "GET /wp-includes/js/jquery/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:23 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:59:24 +0330] "GET /wp-admin/js/widgets/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:24 +0330] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:24 +0330] "GET /wp-admin/js/widget/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:25 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:25 +0330] "GET /wp-content/uploads/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:59:26 +0330] "GET /wp-content/themes/tflow/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:26 +0330] "GET /wp-admin/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:59:26 +0330] "GET /wordpress/wp-admin/includes HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:27 +0330] "GET /wp-admin/js/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:27 +0330] "GET /ALFA_DATA/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:28 +0330] "GET /wp-admin/css/colors/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:28 +0330] "GET /wp-includes/css/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:28 +0330] "GET /wp-includes/ID3 HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:16:59:29 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:29 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:30 +0330] "GET /wp-admin/images/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:30 +0330] "GET /wp-admin/maint/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:30 +0330] "GET /wp-admin/meta/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:31 +0330] "GET /wp-admin/user/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:31 +0330] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:59:32 +0330] "GET /wp-content/uploads/2021/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:32 +0330] "GET /wp-content/plugins/elementor/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:32 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:33 +0330] "GET /upload/image/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:33 +0330] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:59:34 +0330] "GET /wordpress/wp-includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:59:34 +0330] "GET /blog/wp-includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:34 +0330] "GET /sites/default/files/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:35 +0330] "GET /admin/controller/extension/extension/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:16:59:35 +0330] "GET /admin/editor/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:36 +0330] "GET /admin/images/slider/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:36 +0330] "GET /admin/tmp/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:36 +0330] "GET /admin/uploads/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:37 +0330] "GET /Admin/uploads/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:37 +0330] "GET /admin/uploads/images/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:37 +0330] "GET /administrator/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:59:38 +0330] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:38 +0330] "GET /assets/ HTTP/1.1" 200 7528 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:39 +0330] "GET /cgi-bin/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:39 +0330] "GET /components/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:40 +0330] "GET /home/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:59:40 +0330] "GET /include/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:40 +0330] "GET /modules/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:41 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:41 +0330] "GET /mt/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:42 +0330] "GET /site/wp-includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:42 +0330] "GET /tmps/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:42 +0330] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:43 +0330] "GET /wp-admin/css/colors/light/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:43 +0330] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:44 +0330] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:44 +0330] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:44 +0330] "GET /wp-content/languages/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:45 +0330] "GET /wp-content/uploads/2022/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:45 +0330] "GET /wp-content/uploads/2023/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:45 +0330] "GET /wp-content/uploads/2024/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:46 +0330] "GET /wp-includes/wp-includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:59:46 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:59:47 +0330] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:47 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:47 +0330] "GET /wp-includes/images/media/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:48 +0330] "GET /wp-includes/images/smilies/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:48 +0330] "GET /wp-includes/images/wlw/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:49 +0330] "GET /wp-includes/js/codemirror/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:49 +0330] "GET /wp-includes/js/plupload/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:49 +0330] "GET /wp-includes/PHPMailer/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:50 +0330] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:50 +0330] "GET /cache-wordpress/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:51 +0330] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:51 +0330] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:51 +0330] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:16:59:52 +0330] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:52 +0330] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:59:53 +0330] "GET /wp-content/plugins/cakil/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:53 +0330] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:53 +0330] "GET /wp-content/plugins/db/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:54 +0330] "GET /wp-content/plugins/home/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:16:59:54 +0330] "GET /wp-content/plugins/limit/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:55 +0330] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:55 +0330] "GET /wp-content/plugins/prenota/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:55 +0330] "GET /wp-content/plugins/random/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:16:59:56 +0330] "GET /wp-content/plugins/ubh/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:56 +0330] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:16:59:57 +0330] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:16:59:57 +0330] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:57 +0330] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:16:59:58 +0330] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.83.70 - - [07/Jan/2026:16:59:58 +0330] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:16:59:59 +0330] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:16:59:59 +0330] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.83.70 - - [07/Jan/2026:16:59:59 +0330] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:17:00:00 +0330] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:17:00:00 +0330] "GET /wp-content/themes/alera/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:01 +0330] "GET /wp-content/themes/rishi/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:01 +0330] "GET /wp-content/themes/sketch/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:01 +0330] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:02 +0330] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:02 +0330] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:17:00:03 +0330] "GET /wp-content/themes/pridmag/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:03 +0330] "GET /wp-content/themes/zakra/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:03 +0330] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:04 +0330] "GET /admin/upload/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.83.70 - - [07/Jan/2026:17:00:04 +0330] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:17:00:04 +0330] "GET /up/.well-known/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:05 +0330] "GET /wp-content/plugins/apikey/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:05 +0330] "GET /images/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:06 +0330] "GET /css/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:17:00:06 +0330] "GET /wp-admin/css/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:17:00:06 +0330] "GET /wp-includes/js/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:17:00:07 +0330] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:17:00:07 +0330] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:17:00:08 +0330] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:08 +0330] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:08 +0330] "GET /wp-includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.83.70 - - [07/Jan/2026:17:00:09 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:17:00:09 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:17:00:10 +0330] "GET /wp-includes/Text/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:10 +0330] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:10 +0330] "GET /wp-includes/customize/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.83.70 - - [07/Jan/2026:17:00:11 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:11 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:12 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:12 +0330] "GET /wp-content/plugins/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:12 +0330] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:17:00:13 +0330] "GET /about/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:13 +0330] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:17:00:14 +0330] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:17:00:14 +0330] "GET /wp-content/themes/seotheme/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:17:00:14 +0330] "GET /wp-content/plugins/core/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:15 +0330] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:15 +0330] "GET /wp-content/plugins/Cache/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.83.70 - - [07/Jan/2026:17:00:16 +0330] "GET /wp-content/themes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:16 +0330] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:16 +0330] "GET /fonts/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:17:00:17 +0330] "GET /js/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:17 +0330] "GET /routes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.83.70 - - [07/Jan/2026:17:00:18 +0330] "GET /uploads/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:17:00:18 +0330] "GET /templates/beez3/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:18 +0330] "GET /wp-content/themes/digital-download/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:19 +0330] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:19 +0330] "GET /templates/atomic/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.83.70 - - [07/Jan/2026:17:00:19 +0330] "GET /wp-content/plugins/seoo/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:17:00:20 +0330] "GET /wp-includes/js/jcrop/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.83.70 - - [07/Jan/2026:17:00:20 +0330] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:21 +0330] "GET /wp-content/plugins/erin/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:21 +0330] "GET /wp-content/maintenance/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:21 +0330] "GET /wp-content/x/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.83.70 - - [07/Jan/2026:17:00:22 +0330] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.83.70 - - [07/Jan/2026:17:00:22 +0330] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:23 +0330] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.83.70 - - [07/Jan/2026:17:00:23 +0330] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 44.193.201.164 - - [07/Jan/2026:16:55:54 +0330] "GET / HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 194.5.83.98 - - [07/Jan/2026:16:56:23 +0330] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:23 +0330] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:24 +0330] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:24 +0330] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:25 +0330] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:25 +0330] "GET /.tmb/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.83.70 - - [07/Jan/2026:17:00:25 +0330] "GET /wp-content/plugins/fix/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.83.70 - - [07/Jan/2026:17:00:26 +0330] "GET /includes/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.83.70 - - [07/Jan/2026:17:00:26 +0330] "GET /themes/pridmag/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 43.159.149.216 - - [07/Jan/2026:17:32:24 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 125.94.144.102 - - [07/Jan/2026:17:51:04 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.12.43 - - [07/Jan/2026:18:02:11 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.169.39.20 - - [07/Jan/2026:17:57:42 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 152.69.210.5 - - [07/Jan/2026:18:16:29 +0330] "GET /login HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 152.69.210.5 - - [07/Jan/2026:18:16:26 +0330] "GET /wp-admin/ HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 152.69.210.5 - - [07/Jan/2026:18:16:28 +0330] "GET /login HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 152.69.210.5 - - [07/Jan/2026:18:16:26 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 152.69.210.5 - - [07/Jan/2026:18:16:26 +0330] "GET / HTTP/1.1" 200 505 "-" "Go-http-client/1.1" 152.69.210.5 - - [07/Jan/2026:18:16:26 +0330] "GET /wp-login.php HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 66.249.68.32 - - [07/Jan/2026:18:12:37 +0330] "GET /robots.txt HTTP/1.1" 200 390 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 152.69.210.5 - - [07/Jan/2026:18:16:27 +0330] "GET /user/login HTTP/1.1" 200 505 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 152.69.210.5 - - [07/Jan/2026:18:16:27 +0330] "GET /administrator/ HTTP/1.1" 200 505 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 152.69.210.5 - - [07/Jan/2026:18:16:28 +0330] "GET /admin HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 152.69.210.5 - - [07/Jan/2026:18:16:29 +0330] "GET /admin HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 66.249.68.32 - - [07/Jan/2026:18:43:44 +0330] "GET /robots.txt HTTP/1.1" 200 390 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.32 - - [07/Jan/2026:18:43:45 +0330] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 52.169.217.234 - - [07/Jan/2026:18:56:38 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:38 +0330] "GET /motu.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /xsas.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /wen.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /xwpg.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /baee.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /iov.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /mds.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /mga.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /rendi59.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /bgymj.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:39 +0330] "GET /assacc.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:40 +0330] "GET /6y7t.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:40 +0330] "GET /monso.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:40 +0330] "GET /bnnof6.php HTTP/1.1" 200 753 "-" "-" 52.169.217.234 - - [07/Jan/2026:18:56:40 +0330] "GET /str.php HTTP/1.1" 200 753 "-" "-" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/JX-B9HE69J6WX3QX01G6UBT-9XJ1S-TV HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/Z_V7IK0X1_UD4A5QI3H84JXCNN2CQQ_R HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/Y3MGVP1VPT8NC3ED8J4M09JE5506DAO9 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/L7OFR0A9SVXVXAUZD64CJXK30TASPY0Y HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/4L189T7Z2P50-5B29WDJ4JSEGDNECD-_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/AUN12CIVMPSZQ7UBGDUB-6AL2P6G9S95 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/-_3QFWYFM7XLVIBTVO--NIRA6TSJE3HB HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/JAQ8I5N8VUMZON810OSMPQ-ZLW6HT02R HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:19:44:06 +0330] "GET /.well-known/acme-challenge/BRHQ5-E-VQMJBJK2PXY3BSERICRP-YQ9 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 50.117.100.19 - - [07/Jan/2026:19:54:30 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:82.0) Gecko/20100101 Firefox/82.0" 94.103.87.196 - - [07/Jan/2026:22:18:49 +0330] "GET / HTTP/1.1" 200 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/HASNFXT68G8CSFF_QK9FI_JNKSGT8TYI HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/XHSV8BDT1L_0R6WBOUV921NGJNL580E4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/20CVY6NFLMS-2T88IZOGI9EY33BOYI5_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/J0PKC93H4WV28GA6EXUGNDK5IW0JMJGR HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/W7RCFFQUP19LZPDS9A2CVKJZLBJZY5JC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/8TA4UNRF-1BPH1GGP_T_EYEGQ1CS-K9Z HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/ZXF70PVX44TB7DKNW4DZUVS0RVC8I8Z1 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/ZLGKR_VT-NJSVU9TO16T303M6LO9TTKG HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [07/Jan/2026:22:44:05 +0330] "GET /.well-known/acme-challenge/IEK1WK6SEXSAGAOUD0OSDQP8D077D5Y2 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 40.83.96.65 - - [07/Jan/2026:23:05:47 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:48 +0330] "GET /class-t.api.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:48 +0330] "GET /zwso.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:48 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:48 +0330] "GET /class19.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:48 +0330] "GET /class20.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:49 +0330] "GET /admin.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:49 +0330] "GET /randkeyword.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:49 +0330] "GET /fwe.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:49 +0330] "GET /images/m.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:51 +0330] "GET /g.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:51 +0330] "GET /tx1.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:51 +0330] "GET /xv.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:52 +0330] "GET /x56.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:52 +0330] "GET /htaccess.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:52 +0330] "GET /readme.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:52 +0330] "GET /x50.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:53 +0330] "GET /fv.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:53 +0330] "GET /file.php? HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:53 +0330] "GET /lsd.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:53 +0330] "GET /as.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:54 +0330] "GET /wsd.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:54 +0330] "GET /gtc.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:54 +0330] "GET /atx.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:54 +0330] "GET /z60.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:55 +0330] "GET /403.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:55 +0330] "GET /m.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:55 +0330] "GET /themes.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:56 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:56 +0330] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:56 +0330] "GET /click.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:57 +0330] "GET /install.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:57 +0330] "GET /lv.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:57 +0330] "GET /simple.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:57 +0330] "GET /css.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:57 +0330] "GET /cong.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:58 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:58 +0330] "GET /cong.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:58 +0330] "GET /w.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:58 +0330] "GET /404.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:59 +0330] "GET /ioxi-o.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:59 +0330] "GET /0x.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:05:59 +0330] "GET /css.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:00 +0330] "GET /222.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:00 +0330] "GET /wp-content/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:01 +0330] "GET /admin.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:01 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:02 +0330] "GET /classwithtostring.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:02 +0330] "GET /abcd.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:02 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:03 +0330] "GET /inputs.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:03 +0330] "GET /about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:04 +0330] "GET /alfa.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:04 +0330] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:04 +0330] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:04 +0330] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:05 +0330] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:05 +0330] "GET /manager.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:05 +0330] "GET /item.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:06 +0330] "GET /plugins/Cache/footer.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:06 +0330] "GET /404.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:06 +0330] "GET /mail.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:06 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:06 +0330] "GET /sx.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:07 +0330] "GET /wp-admin/maint/admin.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:07 +0330] "GET /alfa.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:07 +0330] "GET /1.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:07 +0330] "GET /byp.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:08 +0330] "GET /wp-trackback.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:08 +0330] "GET /.well-known/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:08 +0330] "GET /wp-admin/network/plugins.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:09 +0330] "GET /wp-admin/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:10 +0330] "GET /gmo.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:10 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:10 +0330] "GET /css/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:10 +0330] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:10 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:11 +0330] "GET /filemanager/dialog.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:11 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:11 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:12 +0330] "GET /index/function.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:12 +0330] "GET /uploads/autoload_classmap.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:13 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:14 +0330] "GET /ww1.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:14 +0330] "GET /about/function.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:14 +0330] "GET /admin/function.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:14 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:15 +0330] "GET /css/colors/blue/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:15 +0330] "GET /security.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:15 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:16 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:16 +0330] "GET /wp-content/upgrade/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:19 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:19 +0330] "GET /wp-content/radio.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:20 +0330] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:20 +0330] "GET /.well-known/admin.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:20 +0330] "GET /wp-content/admin.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:20 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:20 +0330] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:21 +0330] "GET /.well-known/log.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:21 +0330] "GET /class.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:21 +0330] "GET /bless5.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:21 +0330] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:22 +0330] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:22 +0330] "GET /lock360.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:22 +0330] "GET /f35.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:22 +0330] "GET /ioxi-o1.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:23 +0330] "GET /juuuu.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:23 +0330] "GET /ha.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:24 +0330] "GET /gg.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:24 +0330] "GET /we2.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:24 +0330] "GET /04.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:24 +0330] "GET /333.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:25 +0330] "GET /520.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:25 +0330] "GET /ar.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:25 +0330] "GET /x.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:25 +0330] "GET /xx.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:25 +0330] "GET /gifclass4.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:26 +0330] "GET /2clas.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:26 +0330] "GET /ave.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:26 +0330] "GET /wrt.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:26 +0330] "GET /bibil.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:26 +0330] "GET /radio.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:27 +0330] "GET /files.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:27 +0330] "GET /file7.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:27 +0330] "GET /gifclass.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:27 +0330] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:28 +0330] "GET /nox.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:28 +0330] "GET /file48.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:28 +0330] "GET /info.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:29 +0330] "GET /class9.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:29 +0330] "GET /la.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:30 +0330] "GET /bless11.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:30 +0330] "GET /ccou.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:30 +0330] "GET /ton.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:30 +0330] "GET /403.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:31 +0330] "GET /file9.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:31 +0330] "GET /ac.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:31 +0330] "GET /new4.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:31 +0330] "GET /pop.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:32 +0330] "GET /az.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:32 +0330] "GET /xaz.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:32 +0330] "GET /up4.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:32 +0330] "GET /1aa.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:32 +0330] "GET /elp.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:33 +0330] "GET /wtz.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:33 +0330] "GET /galex.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:34 +0330] "GET /xb.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:34 +0330] "GET /ova.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:34 +0330] "GET /vx.php HTTP/1.1" 200 753 "-" "-" 40.83.96.65 - - [07/Jan/2026:23:06:34 +0330] "GET /rh.php HTTP/1.1" 200 753 "-" "-" 109.199.118.129 - - [07/Jan/2026:23:25:49 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 49.235.136.28 - - [08/Jan/2026:00:09:27 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.56.150.88 - - [08/Jan/2026:00:32:53 +0330] "GET / HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:53 +0330] "GET /robots.txt HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:55 +0330] "GET /sitemap.xml HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:55 +0330] "GET /humans.txt HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:55 +0330] "GET / HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36" 149.56.150.88 - - [08/Jan/2026:00:32:55 +0330] "GET /security.txt HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:55 +0330] "GET /.well-known/security.txt HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:55 +0330] "GET /ads.txt HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.88 - - [08/Jan/2026:00:32:56 +0330] "GET /llms.txt HTTP/1.1" 200 753 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.110 - - [08/Jan/2026:00:33:00 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.110 - - [08/Jan/2026:00:33:00 +0330] "GET /assets/index-DLjCdn4I.js HTTP/1.1" 200 449470 "http://www.dasterang.app/" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.110 - - [08/Jan/2026:00:33:01 +0330] "GET /assets/IRANSans-ByQHhy79.ttf HTTP/1.1" 200 35678 "http://www.dasterang.app/assets/index-gTonxFzQ.css" "Mozilla/5.0 (compatible; Dataprovider.com)" 149.56.150.110 - - [08/Jan/2026:00:33:00 +0330] "GET /assets/index-gTonxFzQ.css HTTP/1.1" 200 25205 "http://www.dasterang.app/" "Mozilla/5.0 (compatible; Dataprovider.com)" 43.165.190.5 - - [08/Jan/2026:00:22:48 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.242.189 - - [08/Jan/2026:00:52:20 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/-C4Q6WUW0JPOACDYJZ6IQF9VLIGGZA3L HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/MZPLBK-W74GNB60LBHB8MEMHMFI61C0I HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/0N4F44JZ0556OHCJKDTNAB7MTKFITS12 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/0BITFU9XP9MMXUOJNQ3V9ZM322BJR-LA HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/W9ILB3N_9W058L6Q1V_KPVCUN52OLEI6 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/C31J128TA0LHJXELBAJO3JFQ7OXX5JLS HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/0A11W0O87UNV75FG8VS5RI0S5K1FR8-J HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/GTK6P73JFYIYW5_WHCB7IQHUTTRS_E1Z HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:01:44:03 +0330] "GET /.well-known/acme-challenge/_ROX26V4YIKTHZ3DFCMD_SXR-DBXNGWN HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 23.95.96.140 - - [08/Jan/2026:02:42:40 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 78.153.140.195 - - [08/Jan/2026:03:22:00 +0330] "GET /core/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-us) AppleWebKit/531.22.7 (KHTML, like Gecko) Version/4.0.5 Safari/531.22.7" 78.153.140.195 - - [08/Jan/2026:03:21:59 +0330] "GET /backend/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:29.0) Gecko/20100101 Firefox/29.0" 78.153.140.195 - - [08/Jan/2026:03:22:00 +0330] "GET /core/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; U; Android 4.0.4; en-ca; KFJWI Build/IMM76D) AppleWebKit/537.36 (KHTML, like Gecko) Silk/3.68 like Chrome/39.0.2171.93 Safari/537.36" 78.153.140.195 - - [08/Jan/2026:03:21:58 +0330] "GET /admin/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25" 78.153.140.195 - - [08/Jan/2026:03:22:02 +0330] "GET /.env.save HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; U; Android 4.0.4; es-sa; LG-E615f Build/IMM76D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.195 - - [08/Jan/2026:03:21:58 +0330] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.12) Gecko/20070508 Firefox/1.5.0.11" 78.153.140.195 - - [08/Jan/2026:03:22:02 +0330] "GET /.env.save HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; Android 5.0.2; LG-V410/V41020c Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/34.0.1847.118 Safari/537.36" 78.153.140.195 - - [08/Jan/2026:03:21:59 +0330] "GET /.env.example HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.222.0 Safari/532.2" 78.153.140.195 - - [08/Jan/2026:03:21:58 +0330] "GET /backend/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.3) Gecko/20100401 SUSE/3.6.3-1.1 Firefox/3.6.3" 78.153.140.195 - - [08/Jan/2026:03:22:01 +0330] "GET /phpinfo.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/9.3 Mobile/9B176 Safari/7534.48.3" 78.153.140.195 - - [08/Jan/2026:03:21:56 +0330] "GET /.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" 78.153.140.195 - - [08/Jan/2026:03:21:59 +0330] "GET /staging/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU) AppleWebKit/525.28 (KHTML, like Gecko) Version/3.2.2 Safari/525.28.1" 78.153.140.195 - - [08/Jan/2026:03:22:03 +0330] "GET /test HTTP/1.1" 200 753 "-" "Opera/9.21 (X11; Linux i686; U; en)" 78.153.140.195 - - [08/Jan/2026:03:21:57 +0330] "GET /api/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.8.0.1) Gecko/20060124 Firefox/1.5.0.1" 78.153.140.195 - - [08/Jan/2026:03:22:02 +0330] "GET /info/ HTTP/1.1" 200 753 "-" "Opera/9.20 (Windows NT 6.0; U; en)" 78.153.140.195 - - [08/Jan/2026:03:22:03 +0330] "GET /test HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 OPR/39.0.2256.71" 78.153.140.195 - - [08/Jan/2026:03:21:56 +0330] "GET / HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-G950F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/7.0 Chrome/59.0.3071.125 Mobile Safari/537.36" 78.153.140.195 - - [08/Jan/2026:03:22:03 +0330] "GET /app/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31" 78.153.140.195 - - [08/Jan/2026:03:21:56 +0330] "GET /.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.3 (KHTML, like Gecko) Chrome/5.0.355.0 Safari/533.3" 78.153.140.195 - - [08/Jan/2026:03:21:58 +0330] "GET /admin/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.76 Safari/537.36 OPR/43.0.2442.806" 78.153.140.195 - - [08/Jan/2026:03:21:57 +0330] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 200 753 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT)" 78.153.140.195 - - [08/Jan/2026:03:22:00 +0330] "GET /staging/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/536.26.14 (KHTML, like Gecko) Version/6.0.1 Safari/536.26.14" 78.153.140.195 - - [08/Jan/2026:03:21:57 +0330] "GET /api/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; Android 4.4.4; SM-T113 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Safari/537.36" 78.153.140.195 - - [08/Jan/2026:03:22:01 +0330] "GET /phpinfo.php HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.87 Safari/537.36" 78.153.140.195 - - [08/Jan/2026:03:21:59 +0330] "GET /.env.example HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; Lumia 925) like Gecko" 78.153.140.195 - - [08/Jan/2026:03:22:03 +0330] "GET /app/.env HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; U; Linux x86_64; fr; rv:1.9.1.5) Gecko/20091109 Ubuntu/9.10 (karmic) Firefox/3.5.5" 78.153.140.195 - - [08/Jan/2026:03:21:57 +0330] "GET / HTTP/1.1" 200 753 "-" "Mozilla/5.0 (X11; U; Linux i686; pl; rv:1.8.0.4) Gecko/20060527 SUSE/1.5.0.4-1.7 Firefox/1.5.0.4 Mnenhy/0.7.4.0" 78.153.140.195 - - [08/Jan/2026:03:22:02 +0330] "GET /info/ HTTP/1.1" 200 753 "-" "Mozilla/5.0 (Linux; U; Android 2.2.1; en-us; SGH-T839 Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" 93.158.91.241 - - [08/Jan/2026:03:37:34 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 192.71.126.175 - - [08/Jan/2026:03:40:44 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 134.199.228.69 - - [08/Jan/2026:04:21:30 +0330] "GET /favicon.jpg HTTP/1.1" 200 92219 "http://dasterang.app/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 134.199.228.69 - - [08/Jan/2026:04:21:30 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/7PYWSW9-U4V2T5EGMEWYG2BX7I0LGUPH HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/OEUIF9IA3N8MGGZ130I7-5_8_MKQR0PE HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/6CHQQ6THEH381UTOV_4JIU67F-1S8UJZ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/UR0ZFXW9GXCGWN-FPFIKETV72ESE4XDG HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/IVZTMLQZGTW8XS_DN1TJBMMFT8AJFM8J HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/18HLERLSPLELNI_IGAS3XNL2R0JPPYMO HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/PZ8QTKKG62W-_QVSL7T34KR-39Y0JVEJ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/PZSFSNJ0MRIT_JF351OCBY1GNTQZMZTL HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:04:44:03 +0330] "GET /.well-known/acme-challenge/ICIKLX8FC734VXQ0YVHJ_LGMVSRO9KVV HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /motu.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /xsas.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /wen.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /xwpg.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /baee.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /iov.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /mds.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:21 +0330] "GET /mga.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /rendi59.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /bgymj.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /assacc.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /6y7t.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /monso.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /bnnof6.php HTTP/1.1" 200 753 "-" "-" 13.74.146.113 - - [08/Jan/2026:06:02:22 +0330] "GET /str.php HTTP/1.1" 200 753 "-" "-" 40.77.167.219 - - [08/Jan/2026:06:20:00 +0330] "GET /robots.txt HTTP/1.1" 200 390 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 101.91.148.219 - - [08/Jan/2026:06:16:57 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.77.167.9 - - [08/Jan/2026:06:32:05 +0330] "GET / HTTP/1.1" 200 390 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 43.133.91.48 - - [08/Jan/2026:06:47:32 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.128.155 - - [08/Jan/2026:07:18:36 +0330] "GET / HTTP/1.1" 200 505 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.214.235.114 - - [08/Jan/2026:07:44:03 +0330] "GET /.well-known/acme-challenge/D-7FCB-LOWU-QNMYOPDSOTDUJKQB7MXG HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:02 +0330] "GET /.well-known/acme-challenge/PQ2B49GKY3YS8NBGBGDLLVKSAWRX3P03 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:02 +0330] "GET /.well-known/acme-challenge/P928MI55YKZ0ED9YWX0OBIQOVAQ6J9WK HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:03 +0330] "GET /.well-known/acme-challenge/8U78O_B0TVDLD3PUJVCWOLMN2C9LE3IW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:03 +0330] "GET /.well-known/acme-challenge/OQ-GCD-RZP0TVIE5N--FZYS-E73NI40K HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:02 +0330] "GET /.well-known/acme-challenge/6__576FTEJR16X-3_R_-U--ZZMAKG7HW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:03 +0330] "GET /.well-known/acme-challenge/DRGII3QHXAZ2RI00BX83TJRIDSNW0K2T HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:03 +0330] "GET /.well-known/acme-challenge/A9HQ6WX2BOAY0ZADDFBQZTLICJV59GKU HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:07:44:02 +0330] "GET /.well-known/acme-challenge/BZ6STHJXD3ZK4U1MBAIV6Q0O_RDXJ9WC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/3D8B6UYDNBOSZ82E_XRJ6MJS--N04JKH HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/4N39PKCX5XSG7VNDTHH2AXVL3ZKGV206 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/11PYXAS8FENCC4Y9CXP_TIJ0Z2HA8QCD HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/2ISCV37WY2JRAFOH52XYQ1STE9JEZJOW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/5B6T_D3TP_IVB7G2TOVUJ1DIIJX8K4YC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/B_EP5DVG_R5HT2BDERFAHWFPLHEIX-J6 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/29JW5KZX63CQPSCI68-FY2YT757FT7GE HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/D1CDZU0-0JZE3W9MF5KE46VD2-5FQXUL HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:10:44:03 +0330] "GET /.well-known/acme-challenge/-Y70OH2WQG2YNUHP3IR32LREE0IHBO-D HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/LRM8XHT1PM9Q_52DKWHHKKW7GGBANS33 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/H53Q_FFHNMBW1FWWGRRYF_0EMMUY6NPR HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/QV77OM_MNTJUTWYREQJYRSY7IPKB-ORV HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/A5CQDIPE3Z__NZVL_B2G_EF6UJ-T6OMC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/88KDLQLXIKZJ7MBI_EF22SW8ZJ5R-8DW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 35.91.221.64 - - [08/Jan/2026:11:06:35 +0330] "GET /.well-known/acme-challenge/mb_1BCxIf_zBUl48X9IP7a-4InJDM64YrJMG472oVWQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/SPJ63ZEQ7IRM8153A7HM9LEE2IC4D0_A HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 51.20.95.122 - - [08/Jan/2026:11:06:34 +0330] "GET /.well-known/acme-challenge/mb_1BCxIf_zBUl48X9IP7a-4InJDM64YrJMG472oVWQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 3.134.253.234 - - [08/Jan/2026:11:06:34 +0330] "GET /.well-known/acme-challenge/mb_1BCxIf_zBUl48X9IP7a-4InJDM64YrJMG472oVWQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/LN8SBEVM_30HOLBMEQRBQC2JZFC2FNOH HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/7T6WDD3I_VZNT_C7SVNMC66QY7QRE5AA HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.214.235.114 - - [08/Jan/2026:11:03:33 +0330] "GET /.well-known/acme-challenge/8VLS0C9WYWLOSWT-OD7F812-9G2JGA-L HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 23.178.112.211 - - [08/Jan/2026:11:06:34 +0330] "GET /.well-known/acme-challenge/mb_1BCxIf_zBUl48X9IP7a-4InJDM64YrJMG472oVWQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 13.212.148.134 - - [08/Jan/2026:11:06:35 +0330] "GET /.well-known/acme-challenge/mb_1BCxIf_zBUl48X9IP7a-4InJDM64YrJMG472oVWQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"
Coded With 💗 by
0x6ick Mod By V1rus_Alfa