185.39.19.43 - - [30/Jul/2025:11:56:59 +0330] "GET / HTTP/1.0" 301 795 "http://freecloudservice.ir/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 4.186.26.86 - - [30/Jul/2025:13:15:45 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 4.186.26.86 - - [30/Jul/2025:13:15:46 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.225.50.88 - - [30/Jul/2025:13:39:43 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 194.225.50.88 - - [30/Jul/2025:13:39:46 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 194.225.50.88 - - [30/Jul/2025:13:39:59 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 43.159.128.247 - - [30/Jul/2025:13:46:46 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.178.192.22 - - [30/Jul/2025:14:36:20 +0330] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:21 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:21 +0330] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:21 +0330] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:21 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:22 +0330] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:22 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:22 +0330] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:22 +0330] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:22 +0330] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:23 +0330] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:23 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:23 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:23 +0330] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:23 +0330] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:24 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:24 +0330] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:24 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:24 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:24 +0330] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:25 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:25 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:25 +0330] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:25 +0330] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:25 +0330] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:25 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:26 +0330] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:26 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:26 +0330] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:26 +0330] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:27 +0330] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:27 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:27 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:27 +0330] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:27 +0330] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:28 +0330] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:28 +0330] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:28 +0330] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:28 +0330] "GET /wp-content/gallery/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:28 +0330] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:29 +0330] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:29 +0330] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:29 +0330] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:29 +0330] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:30 +0330] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:30 +0330] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:30 +0330] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:30 +0330] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:30 +0330] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:31 +0330] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:31 +0330] "GET /img/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:31 +0330] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:31 +0330] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:31 +0330] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:32 +0330] "GET /images/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:32 +0330] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:32 +0330] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:32 +0330] "GET /wp-admin/css/colors/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:33 +0330] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:33 +0330] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:33 +0330] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:33 +0330] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:33 +0330] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:34 +0330] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:34 +0330] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:34 +0330] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:34 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:34 +0330] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:35 +0330] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:35 +0330] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:35 +0330] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:35 +0330] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:35 +0330] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:36 +0330] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:36 +0330] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:36 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:36 +0330] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:36 +0330] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:37 +0330] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:37 +0330] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:37 +0330] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:37 +0330] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:37 +0330] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:38 +0330] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:38 +0330] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:38 +0330] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:38 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:38 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:39 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:39 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:39 +0330] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:39 +0330] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:39 +0330] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:39 +0330] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:40 +0330] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:40 +0330] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:40 +0330] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:40 +0330] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:41 +0330] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:41 +0330] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:41 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:41 +0330] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:41 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:42 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:42 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:42 +0330] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:42 +0330] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:42 +0330] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:43 +0330] "GET /wp-admin/network/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:43 +0330] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:43 +0330] "GET /cgi-bin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:43 +0330] "GET /css/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:44 +0330] "GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:44 +0330] "GET /img/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:44 +0330] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:44 +0330] "GET /wp-admin/images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:44 +0330] "GET /images/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:45 +0330] "GET /wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:45 +0330] "GET /wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:45 +0330] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:45 +0330] "GET /wp-admin/css/colors/blue/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:45 +0330] "GET /wp-admin/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:46 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:46 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:46 +0330] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:46 +0330] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:46 +0330] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:47 +0330] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:47 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:47 +0330] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:47 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:47 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:48 +0330] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:48 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:48 +0330] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:48 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:48 +0330] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:49 +0330] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:49 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:49 +0330] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:49 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:49 +0330] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:50 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:50 +0330] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:50 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:50 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:50 +0330] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:51 +0330] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:51 +0330] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:51 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:51 +0330] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:51 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:52 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:52 +0330] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:52 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:52 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:52 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:53 +0330] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:53 +0330] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 62.141.44.236 - - [30/Jul/2025:14:29:59 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 52.178.192.22 - - [30/Jul/2025:14:36:53 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:53 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:53 +0330] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:54 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:54 +0330] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:54 +0330] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:54 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:54 +0330] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:55 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:55 +0330] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:55 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:55 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [30/Jul/2025:14:36:55 +0330] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 45.94.31.77 - - [30/Jul/2025:16:52:44 +0330] "GET / HTTP/1.1" 301 795 "-" "-" 51.68.236.69 - - [30/Jul/2025:16:21:02 +0330] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.236.69 - - [30/Jul/2025:16:21:03 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 45.94.31.77 - - [30/Jul/2025:16:52:44 +0330] "GET / HTTP/1.1" 301 795 "-" "-" 194.225.50.88 - - [30/Jul/2025:17:13:03 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 194.225.50.88 - - [30/Jul/2025:17:13:11 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 194.225.50.88 - - [30/Jul/2025:17:13:19 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.81 Mobile Safari/537.36" 43.165.67.57 - - [30/Jul/2025:18:26:29 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.207.159.199 - - [30/Jul/2025:19:19:03 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:08 +0330] "GET /autoload_classmap.php?p=%09%09%09%09%09%09%09%09%09%09%09%09%09%09%20/file.php?fm=true&delete=license.txt&path=/home/nevzatus/shroomsdeliverynearme.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:09 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home/nevzatus/shroomsdeliverynearme.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:09 +0330] "GET /about.php?dir=/home/sarazi/public_html HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:10 +0330] "GET /cc.php%20/admin.php?fm=true&delete=license.txt&path=/www/wwwroot/www.globalcasinolist.net/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:10 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home/nevzatus/shroomsdeliverynearme.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:11 +0330] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:11 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:12 +0330] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:13 +0330] "GET /wp-info.php?p=%2Fhome%2Fkaltimti%2Finstaweb%2Fmimbar-minangnews.com%2Fnew HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:13 +0330] "GET /as.php?option&path=/home/mbeluggf/localmodelfreelance02.com HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:14 +0330] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:14 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:15 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:15 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home10/joyncrafting/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:16 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:16 +0330] "GET /admin/function.php?fm=true&path=/home/u838495715/domains/aviconindia.com/public_html/admin HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:17 +0330] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:17 +0330] "GET /wp-content/packed.php?option&path=/nas/content/live/commerceeq/wp-content HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:18 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:19 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home/ujdxbnpt/radhakrishnaschool.in/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:19 +0330] "GET /text.php?fm=true&delete=license.txt&path=/var/www/vhosts/demomikucha.com/httpdocs/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:20 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:20 +0330] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:21 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:21 +0330] "GET /file.php?fm=true&delete=license.txt&path=/customers/2/a/b/cmbaatuop/webroots/29f11c9f/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:22 +0330] "GET /404.php?fm=true&delete=license.txt&path=/home/u746949441/domains/psac.in/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:22 +0330] "GET /2.php?fm=true&delete=.htacess&path=/home/u783661527/domains/pedvmax.com.br/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:23 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:24 +0330] "GET /text.php?fm=true&delete=.htaccess&path=/home/ssbacha1/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:24 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:25 +0330] "GET /file.php?fm=true&delete=license.txt&path=/customers/e/7/8/c3veehjbe/webroots/sites/httpdocs/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:25 +0330] "GET /app.php?fm=true&delete=.htaccess&path=/home/u996667838/domains/prudenture.com/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:26 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:26 +0330] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:27 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:27 +0330] "GET /admin.php?fm=true&delete=license.txt&path=/www/wwwroot/www.globalcasinolist.net/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:28 +0330] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:28 +0330] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:29 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:30 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:30 +0330] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:31 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:31 +0330] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:32 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:32 +0330] "GET /home.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:33 +0330] "GET /.well-known/pki-validation/about.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:33 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:34 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:35 +0330] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:36 +0330] "GET /text.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:36 +0330] "GET /.well-known/pki-validation/about.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:37 +0330] "GET /admin.php?fm=true&delete=license.txt&path=/home/u756317209/domains/regmaeducation.com/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:38 +0330] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:38 +0330] "GET /wp-content/admin.php?fm=true&delete=license.txt&path=/home/gcynslpl/clinicalpsychologistpretoria.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:39 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:39 +0330] "GET /1.php?option&path=/www/wwwroot/www.mkgseattlestore.com HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:40 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:41 +0330] "GET /bless.php?fm=true&delete=.htaccess.bk&path=/home/u392878141/domains/siigmatech.com/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:19:19:41 +0330] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 146.70.186.188 - - [30/Jul/2025:19:44:00 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:00 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:00 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:00 +0330] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:01 +0330] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:01 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:01 +0330] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:01 +0330] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:01 +0330] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:01 +0330] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:02 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:02 +0330] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:02 +0330] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:02 +0330] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:02 +0330] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:03 +0330] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:03 +0330] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:03 +0330] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:03 +0330] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:03 +0330] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:03 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:04 +0330] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:04 +0330] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:04 +0330] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:04 +0330] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:04 +0330] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:44:04 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:05 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:05 +0330] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:05 +0330] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:05 +0330] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:05 +0330] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:06 +0330] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:06 +0330] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:06 +0330] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:06 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:44:06 +0330] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:06 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:07 +0330] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:44:07 +0330] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:07 +0330] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:07 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:07 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:44:07 +0330] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:08 +0330] "GET /ae.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:08 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:08 +0330] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:08 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:08 +0330] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:09 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:44:09 +0330] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:44:09 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:09 +0330] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:09 +0330] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:09 +0330] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:10 +0330] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:10 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:44:10 +0330] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:10 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:10 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:11 +0330] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:44:11 +0330] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:11 +0330] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:12 +0330] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:12 +0330] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:12 +0330] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:12 +0330] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:12 +0330] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:13 +0330] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:13 +0330] "GET /wxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:13 +0330] "GET /amigo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:13 +0330] "GET /yoi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:44:13 +0330] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:14 +0330] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:14 +0330] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:14 +0330] "GET /we1y8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:14 +0330] "GET /wp-content/iu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:14 +0330] "GET /ccx/th3_err0r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:15 +0330] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:15 +0330] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:44:15 +0330] "GET /post-data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:15 +0330] "GET /w0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:15 +0330] "GET /wsanon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:16 +0330] "GET /wp-content/small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:16 +0330] "GET /wp-content/mode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:16 +0330] "GET /indo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:16 +0330] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:16 +0330] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:16 +0330] "GET /archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:17 +0330] "GET /po8sa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:17 +0330] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:17 +0330] "GET /zcanp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:17 +0330] "GET /burjuva.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:17 +0330] "GET /pvt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:18 +0330] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:18 +0330] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:18 +0330] "GET /crypted.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:18 +0330] "GET /h0110w4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:18 +0330] "GET /vesiw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:19 +0330] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:19 +0330] "GET /wp-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:19 +0330] "GET /wp-includes/lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:19 +0330] "GET /wp-content/ice.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:19 +0330] "GET /wp-content/lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:20 +0330] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:20 +0330] "GET /tonant.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:20 +0330] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:20 +0330] "GET /config.bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:20 +0330] "GET /bypass403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:21 +0330] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:21 +0330] "GET /allahnaber.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:21 +0330] "GET /AK-74.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:21 +0330] "GET /alfa3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:21 +0330] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:22 +0330] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:44:22 +0330] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:44:22 +0330] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:22 +0330] "GET /cw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:22 +0330] "GET /date.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:23 +0330] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:23 +0330] "GET /icomsium.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:23 +0330] "GET /ico.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:44:23 +0330] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:23 +0330] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:23 +0330] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:24 +0330] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:24 +0330] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:24 +0330] "GET /pws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:24 +0330] "GET /r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:24 +0330] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:25 +0330] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:25 +0330] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:25 +0330] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:25 +0330] "GET /wp-content/batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:25 +0330] "GET /wp-content/masshp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:44:26 +0330] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:26 +0330] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:26 +0330] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:26 +0330] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:26 +0330] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:27 +0330] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:27 +0330] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:27 +0330] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:27 +0330] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:27 +0330] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:28 +0330] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:28 +0330] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:28 +0330] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:28 +0330] "GET /wp-content/plugins/upspy/con.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:28 +0330] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:28 +0330] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:29 +0330] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:29 +0330] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:29 +0330] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:29 +0330] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:29 +0330] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:30 +0330] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:30 +0330] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:30 +0330] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:44:30 +0330] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:30 +0330] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:31 +0330] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:31 +0330] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:31 +0330] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:31 +0330] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:31 +0330] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:32 +0330] "GET /xlt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:32 +0330] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:32 +0330] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:32 +0330] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:32 +0330] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:33 +0330] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:33 +0330] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:33 +0330] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:33 +0330] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:33 +0330] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:33 +0330] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:34 +0330] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:34 +0330] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:34 +0330] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:34 +0330] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:34 +0330] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:35 +0330] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:35 +0330] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:35 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:35 +0330] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:35 +0330] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:36 +0330] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:36 +0330] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:36 +0330] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:36 +0330] "GET /gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:36 +0330] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:37 +0330] "GET /asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:37 +0330] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:37 +0330] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:37 +0330] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:44:37 +0330] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:38 +0330] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:38 +0330] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:38 +0330] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:38 +0330] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:38 +0330] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:39 +0330] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:39 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:39 +0330] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:39 +0330] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:39 +0330] "GET /xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:39 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:40 +0330] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:40 +0330] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:40 +0330] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:40 +0330] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:44:40 +0330] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:41 +0330] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:41 +0330] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:41 +0330] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:41 +0330] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:41 +0330] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:42 +0330] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:42 +0330] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:42 +0330] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:42 +0330] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:42 +0330] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:43 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:43 +0330] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:43 +0330] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:43 +0330] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:43 +0330] "GET /in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:44 +0330] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:44:44 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:44 +0330] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:44 +0330] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:44 +0330] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:44 +0330] "GET /chosen-667.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:45 +0330] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:44:45 +0330] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:45 +0330] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:44:45 +0330] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:45 +0330] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:44:46 +0330] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:46 +0330] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:46 +0330] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:46 +0330] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:44:46 +0330] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:47 +0330] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:47 +0330] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:47 +0330] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:47 +0330] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:47 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:44:48 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:48 +0330] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:44:48 +0330] "GET /admin/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:48 +0330] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:48 +0330] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:49 +0330] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:49 +0330] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:49 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:49 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:49 +0330] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:50 +0330] "GET /cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:50 +0330] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:50 +0330] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:50 +0330] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:50 +0330] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:50 +0330] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:51 +0330] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:51 +0330] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:51 +0330] "GET /back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:51 +0330] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:44:51 +0330] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:52 +0330] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:52 +0330] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:52 +0330] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:52 +0330] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:52 +0330] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:44:53 +0330] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:53 +0330] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:53 +0330] "GET /phpfm3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:53 +0330] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:53 +0330] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:54 +0330] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:44:11 +0330] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:56 +0330] "GET /ulc6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:44:56 +0330] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:57 +0330] "GET /zip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:57 +0330] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:57 +0330] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:44:57 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:44:57 +0330] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:44:57 +0330] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:58 +0330] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:58 +0330] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:58 +0330] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:44:58 +0330] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:58 +0330] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:59 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:59 +0330] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:59 +0330] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:59 +0330] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:59 +0330] "GET /rcc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:00 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:00 +0330] "GET /layout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:45:00 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:00 +0330] "GET /history.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:45:00 +0330] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:01 +0330] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:01 +0330] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:01 +0330] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:01 +0330] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:01 +0330] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:02 +0330] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:02 +0330] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:02 +0330] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:02 +0330] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:02 +0330] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:45:02 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:03 +0330] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:03 +0330] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:03 +0330] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:03 +0330] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:45:03 +0330] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:04 +0330] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:04 +0330] "GET /wander.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:04 +0330] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:04 +0330] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:04 +0330] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:05 +0330] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:05 +0330] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:05 +0330] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:05 +0330] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:45:05 +0330] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:06 +0330] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:06 +0330] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:06 +0330] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:06 +0330] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:06 +0330] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:45:06 +0330] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:07 +0330] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:07 +0330] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:07 +0330] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:07 +0330] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:08 +0330] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:08 +0330] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:08 +0330] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:08 +0330] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:08 +0330] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:08 +0330] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:09 +0330] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:09 +0330] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:09 +0330] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:09 +0330] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:09 +0330] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:10 +0330] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:45:10 +0330] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:10 +0330] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:10 +0330] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:10 +0330] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:11 +0330] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:11 +0330] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:11 +0330] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:11 +0330] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:11 +0330] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:12 +0330] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:12 +0330] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:12 +0330] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:12 +0330] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:12 +0330] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:13 +0330] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:13 +0330] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:13 +0330] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:13 +0330] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:13 +0330] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:13 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:14 +0330] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:14 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:45:14 +0330] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:14 +0330] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:14 +0330] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:15 +0330] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:15 +0330] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:15 +0330] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:15 +0330] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:15 +0330] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:16 +0330] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:16 +0330] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:16 +0330] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:16 +0330] "GET /chosen.php?upload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:16 +0330] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:16 +0330] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:17 +0330] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:17 +0330] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:17 +0330] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:17 +0330] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:17 +0330] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:18 +0330] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:45:18 +0330] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:18 +0330] "GET /wordpress/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:18 +0330] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:45:18 +0330] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:45:19 +0330] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:19 +0330] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:19 +0330] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:45:19 +0330] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:19 +0330] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:20 +0330] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:20 +0330] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:20 +0330] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:20 +0330] "GET /.well-known/pki-validation/aurocuus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:20 +0330] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:21 +0330] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:21 +0330] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:21 +0330] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:21 +0330] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:21 +0330] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:22 +0330] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:22 +0330] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:22 +0330] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:22 +0330] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:22 +0330] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:22 +0330] "GET /.well-known/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:23 +0330] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:45:23 +0330] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:23 +0330] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:23 +0330] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:23 +0330] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:24 +0330] "GET /wp-content/uploads/aves.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:24 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:24 +0330] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:24 +0330] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:24 +0330] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:25 +0330] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:25 +0330] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:45:25 +0330] "GET /bulk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:25 +0330] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:45:25 +0330] "GET /.well-known/pki-validation/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:26 +0330] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:26 +0330] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:26 +0330] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:26 +0330] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:45:26 +0330] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:26 +0330] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:27 +0330] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:27 +0330] "GET /wp-simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:27 +0330] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:27 +0330] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:27 +0330] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:28 +0330] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:28 +0330] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:28 +0330] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:28 +0330] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:28 +0330] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:29 +0330] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:29 +0330] "GET /.well-known/pki-validation/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:29 +0330] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:29 +0330] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:29 +0330] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:30 +0330] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:30 +0330] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:30 +0330] "GET /header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:30 +0330] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:30 +0330] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:31 +0330] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:31 +0330] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:31 +0330] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:31 +0330] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:31 +0330] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:32 +0330] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:32 +0330] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:32 +0330] "GET /wp-admin/maint/pongs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:45:32 +0330] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:32 +0330] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:32 +0330] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:33 +0330] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:33 +0330] "GET /wp-includes/images/votes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:33 +0330] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:33 +0330] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:33 +0330] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:34 +0330] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:34 +0330] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:34 +0330] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:34 +0330] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:34 +0330] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:35 +0330] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:35 +0330] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:35 +0330] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:35 +0330] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:35 +0330] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:36 +0330] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:36 +0330] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:36 +0330] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:54 +0330] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:54 +0330] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:44:54 +0330] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:54 +0330] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:55 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:44:55 +0330] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:55 +0330] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:55 +0330] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:44:55 +0330] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:44:55 +0330] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:36 +0330] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:45:36 +0330] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:45:37 +0330] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:37 +0330] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:37 +0330] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:37 +0330] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:37 +0330] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:37 +0330] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:38 +0330] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:38 +0330] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:38 +0330] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:38 +0330] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:38 +0330] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:39 +0330] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:39 +0330] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:39 +0330] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:39 +0330] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:45:39 +0330] "GET /wp-includes/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:40 +0330] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:45:40 +0330] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:40 +0330] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:40 +0330] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:40 +0330] "GET /wp-content/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:45:41 +0330] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:41 +0330] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:41 +0330] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:41 +0330] "GET /.well-known/Ex34L.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:45:41 +0330] "GET /wp-admin/css/colors/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:42 +0330] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:42 +0330] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:42 +0330] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:42 +0330] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:42 +0330] "GET /wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:43 +0330] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:43 +0330] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:43 +0330] "GET /wp-admin/includes/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:43 +0330] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:43 +0330] "GET /.well-known/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:43 +0330] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:44 +0330] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:44 +0330] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:44 +0330] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:44 +0330] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:44 +0330] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:45 +0330] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:45 +0330] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:45 +0330] "GET /.well-known/bosctspi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:45:45 +0330] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:45 +0330] "GET /.well-known/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:46 +0330] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:46 +0330] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:46 +0330] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:46 +0330] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:46 +0330] "GET /images/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:47 +0330] "GET /images/rest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:47 +0330] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:47 +0330] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:47 +0330] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:47 +0330] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:47 +0330] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:45:48 +0330] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:48 +0330] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:48 +0330] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:48 +0330] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:48 +0330] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:49 +0330] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:49 +0330] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:49 +0330] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:49 +0330] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:49 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:50 +0330] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:50 +0330] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:50 +0330] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:50 +0330] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:50 +0330] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:51 +0330] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:51 +0330] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:45:51 +0330] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:45:51 +0330] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:51 +0330] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:52 +0330] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:52 +0330] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:52 +0330] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:52 +0330] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:52 +0330] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:45:52 +0330] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:53 +0330] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:53 +0330] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:45:53 +0330] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:53 +0330] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:53 +0330] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:54 +0330] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:54 +0330] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:54 +0330] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:54 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:54 +0330] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:55 +0330] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:55 +0330] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:45:55 +0330] "GET /ovatools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:55 +0330] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:55 +0330] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:45:55 +0330] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:56 +0330] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:56 +0330] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:45:56 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:56 +0330] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:56 +0330] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:57 +0330] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:57 +0330] "GET /wp-admin/includes/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:45:57 +0330] "GET /wp-admin/maint/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:57 +0330] "GET /wp-content/upgrade/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:45:57 +0330] "GET /images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:45:58 +0330] "GET /wp-admin/user/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:45:58 +0330] "GET /wp-admin/js/widgets/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:58 +0330] "GET /wp-admin/network/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:58 +0330] "GET /wp-admin/images/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:58 +0330] "GET /.well-known/pki-validation/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:59 +0330] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:59 +0330] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:59 +0330] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:45:59 +0330] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:45:59 +0330] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:00 +0330] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:00 +0330] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:46:00 +0330] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:00 +0330] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:00 +0330] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:46:01 +0330] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:01 +0330] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:01 +0330] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:01 +0330] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:01 +0330] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:02 +0330] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:02 +0330] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:02 +0330] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:46:02 +0330] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:02 +0330] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:02 +0330] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:03 +0330] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:03 +0330] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:03 +0330] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:03 +0330] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:46:03 +0330] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:04 +0330] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:04 +0330] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:04 +0330] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:04 +0330] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:04 +0330] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:05 +0330] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:05 +0330] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:05 +0330] "GET /wp-content/themes/signify/firkon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:05 +0330] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:05 +0330] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:06 +0330] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:06 +0330] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:06 +0330] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:06 +0330] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:06 +0330] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:07 +0330] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:07 +0330] "GET /wp-22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:46:07 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:07 +0330] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:07 +0330] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:46:07 +0330] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:08 +0330] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:08 +0330] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:08 +0330] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:08 +0330] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:08 +0330] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:09 +0330] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:09 +0330] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:09 +0330] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:09 +0330] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:09 +0330] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:10 +0330] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:10 +0330] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:10 +0330] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:10 +0330] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:10 +0330] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:11 +0330] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:11 +0330] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:11 +0330] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:11 +0330] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:11 +0330] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:12 +0330] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:12 +0330] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:12 +0330] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:12 +0330] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:46:12 +0330] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:12 +0330] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:13 +0330] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:13 +0330] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:13 +0330] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:13 +0330] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:13 +0330] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:14 +0330] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:46:14 +0330] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:14 +0330] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:14 +0330] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:14 +0330] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:15 +0330] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:15 +0330] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:15 +0330] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:15 +0330] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:15 +0330] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:16 +0330] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:16 +0330] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:46:16 +0330] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:46:16 +0330] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:16 +0330] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:17 +0330] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:17 +0330] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:17 +0330] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:17 +0330] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:17 +0330] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:18 +0330] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:18 +0330] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:18 +0330] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:18 +0330] "GET /wp-admin/css/colors/coffee/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:18 +0330] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:18 +0330] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:19 +0330] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:19 +0330] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:19 +0330] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:19 +0330] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:19 +0330] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:20 +0330] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:20 +0330] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:20 +0330] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:20 +0330] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:20 +0330] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:21 +0330] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:21 +0330] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:21 +0330] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:21 +0330] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:21 +0330] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:46:21 +0330] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:22 +0330] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:22 +0330] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:22 +0330] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:46:22 +0330] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:22 +0330] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:23 +0330] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:23 +0330] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:46:23 +0330] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:23 +0330] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:23 +0330] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:46:24 +0330] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:24 +0330] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:24 +0330] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:46:24 +0330] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:24 +0330] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:25 +0330] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:25 +0330] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:25 +0330] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:25 +0330] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:25 +0330] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:26 +0330] "GET /tools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:26 +0330] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:26 +0330] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:26 +0330] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:26 +0330] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:26 +0330] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:27 +0330] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:27 +0330] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:27 +0330] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:27 +0330] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:27 +0330] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:28 +0330] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:28 +0330] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:28 +0330] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:28 +0330] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:28 +0330] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:29 +0330] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:29 +0330] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:29 +0330] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:46:29 +0330] "GET /chosen.php?p=\\u001b[0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:46:29 +0330] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:30 +0330] "GET /dropdown.php%5Cu001b%5B0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:30 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:46:30 +0330] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:46:30 +0330] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:46:30 +0330] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:30 +0330] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:31 +0330] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:31 +0330] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:31 +0330] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:31 +0330] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:31 +0330] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:32 +0330] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:32 +0330] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:32 +0330] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:32 +0330] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:32 +0330] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:33 +0330] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:33 +0330] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:33 +0330] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:33 +0330] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:33 +0330] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:34 +0330] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:34 +0330] "GET /about.php%5Cu001b%5B0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.186.188 - - [30/Jul/2025:19:46:34 +0330] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:34 +0330] "GET /GA13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:34 +0330] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:34 +0330] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:35 +0330] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:46:35 +0330] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:35 +0330] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:35 +0330] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:35 +0330] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:36 +0330] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:36 +0330] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:36 +0330] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:36 +0330] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:36 +0330] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:36 +0330] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:37 +0330] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:37 +0330] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:37 +0330] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:37 +0330] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:38 +0330] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:38 +0330] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:38 +0330] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:38 +0330] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:38 +0330] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:38 +0330] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:39 +0330] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:39 +0330] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:39 +0330] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:39 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:39 +0330] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:40 +0330] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:40 +0330] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:40 +0330] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:40 +0330] "GET /install.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:40 +0330] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:41 +0330] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:41 +0330] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:41 +0330] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:41 +0330] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:41 +0330] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:46:41 +0330] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:46:42 +0330] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:42 +0330] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:42 +0330] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:42 +0330] "GET /function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:46:42 +0330] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:43 +0330] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:43 +0330] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:43 +0330] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:43 +0330] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:43 +0330] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:44 +0330] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:46:44 +0330] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:44 +0330] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:46:44 +0330] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:44 +0330] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:45 +0330] "GET /phpzipincs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:46:45 +0330] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:45 +0330] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:45 +0330] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:45 +0330] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:45 +0330] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:46 +0330] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:46 +0330] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:46 +0330] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:46 +0330] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:46:46 +0330] "GET /shop.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:47 +0330] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:47 +0330] "GET /c.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:47 +0330] "GET /foter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:47 +0330] "GET /module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:47 +0330] "GET /pageup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:48 +0330] "GET /string.pho HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:48 +0330] "GET /unix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:48 +0330] "GET /webix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:48 +0330] "GET /wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:48 +0330] "GET /sdl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:49 +0330] "GET /dns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:49 +0330] "GET /service.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:49 +0330] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:49 +0330] "GET /.well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:49 +0330] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:50 +0330] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:50 +0330] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:50 +0330] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:50 +0330] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:50 +0330] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:50 +0330] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:51 +0330] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:51 +0330] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:51 +0330] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:51 +0330] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:51 +0330] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:52 +0330] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:52 +0330] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:52 +0330] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:52 +0330] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:46:52 +0330] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:46:53 +0330] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:53 +0330] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:53 +0330] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:53 +0330] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:53 +0330] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:54 +0330] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.186.188 - - [30/Jul/2025:19:46:54 +0330] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:54 +0330] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:54 +0330] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:54 +0330] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:54 +0330] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.186.188 - - [30/Jul/2025:19:46:55 +0330] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:55 +0330] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:55 +0330] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:55 +0330] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:55 +0330] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:46:56 +0330] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:56 +0330] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:56 +0330] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:56 +0330] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:46:56 +0330] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:57 +0330] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:57 +0330] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:57 +0330] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:57 +0330] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:57 +0330] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:58 +0330] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:58 +0330] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:58 +0330] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:58 +0330] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:58 +0330] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:58 +0330] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:59 +0330] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:46:59 +0330] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:46:59 +0330] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:59 +0330] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:46:59 +0330] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:00 +0330] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:00 +0330] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:00 +0330] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:00 +0330] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:00 +0330] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:01 +0330] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:01 +0330] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:47:01 +0330] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:01 +0330] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:01 +0330] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:02 +0330] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.186.188 - - [30/Jul/2025:19:47:02 +0330] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:02 +0330] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:02 +0330] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:02 +0330] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:03 +0330] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:03 +0330] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:03 +0330] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:03 +0330] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:03 +0330] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:03 +0330] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:04 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:04 +0330] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:04 +0330] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:04 +0330] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:04 +0330] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:05 +0330] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:05 +0330] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:05 +0330] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:47:05 +0330] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:05 +0330] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:06 +0330] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:06 +0330] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:47:06 +0330] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:06 +0330] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:06 +0330] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:07 +0330] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:47:07 +0330] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:47:07 +0330] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:47:07 +0330] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:07 +0330] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:08 +0330] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:47:08 +0330] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.186.188 - - [30/Jul/2025:19:47:08 +0330] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:08 +0330] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.186.188 - - [30/Jul/2025:19:47:08 +0330] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.186.188 - - [30/Jul/2025:19:47:08 +0330] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:09 +0330] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:09 +0330] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.186.188 - - [30/Jul/2025:19:47:09 +0330] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:09 +0330] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:09 +0330] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:10 +0330] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:10 +0330] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.186.188 - - [30/Jul/2025:19:47:10 +0330] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:10 +0330] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:10 +0330] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.186.188 - - [30/Jul/2025:19:47:11 +0330] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.186.188 - - [30/Jul/2025:19:47:11 +0330] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:47:11 +0330] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:11 +0330] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:47:11 +0330] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.186.188 - - [30/Jul/2025:19:47:12 +0330] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:12 +0330] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.186.188 - - [30/Jul/2025:19:47:12 +0330] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.186.188 - - [30/Jul/2025:19:47:12 +0330] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:47:12 +0330] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.186.188 - - [30/Jul/2025:19:47:13 +0330] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.145.227.125 - - [30/Jul/2025:20:32:46 +0330] "GET /administrator/components/com_maian15/charts/php-ofc-library/ofc_upload_image.php HTTP/1.1" 301 795 "-" "ALittle Client" 172.207.159.199 - - [30/Jul/2025:20:52:19 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:20 +0330] "GET /autoload_classmap.php?p=%09%09%09%09%09%09%09%09%09%09%09%09%09%09%20/file.php?fm=true&delete=license.txt&path=/home/nevzatus/shroomsdeliverynearme.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:21 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home/nevzatus/shroomsdeliverynearme.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:21 +0330] "GET /about.php?dir=/home/sarazi/public_html HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:22 +0330] "GET /cc.php%20/admin.php?fm=true&delete=license.txt&path=/www/wwwroot/www.globalcasinolist.net/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:23 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home/nevzatus/shroomsdeliverynearme.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:23 +0330] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:24 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:24 +0330] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:25 +0330] "GET /wp-info.php?p=%2Fhome%2Fkaltimti%2Finstaweb%2Fmimbar-minangnews.com%2Fnew HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:25 +0330] "GET /as.php?option&path=/home/mbeluggf/localmodelfreelance02.com HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:26 +0330] "GET /wp-includes/ID3/index.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:26 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:27 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:28 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home10/joyncrafting/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:28 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:29 +0330] "GET /admin/function.php?fm=true&path=/home/u838495715/domains/aviconindia.com/public_html/admin HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:29 +0330] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:30 +0330] "GET /wp-content/packed.php?option&path=/nas/content/live/commerceeq/wp-content HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:30 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:31 +0330] "GET /file.php?fm=true&delete=license.txt&path=/home/ujdxbnpt/radhakrishnaschool.in/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:31 +0330] "GET /text.php?fm=true&delete=license.txt&path=/var/www/vhosts/demomikucha.com/httpdocs/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:32 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:32 +0330] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:33 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:34 +0330] "GET /file.php?fm=true&delete=license.txt&path=/customers/2/a/b/cmbaatuop/webroots/29f11c9f/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:34 +0330] "GET /404.php?fm=true&delete=license.txt&path=/home/u746949441/domains/psac.in/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:35 +0330] "GET /2.php?fm=true&delete=.htacess&path=/home/u783661527/domains/pedvmax.com.br/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:35 +0330] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:36 +0330] "GET /text.php?fm=true&delete=.htaccess&path=/home/ssbacha1/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:36 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:37 +0330] "GET /file.php?fm=true&delete=license.txt&path=/customers/e/7/8/c3veehjbe/webroots/sites/httpdocs/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:37 +0330] "GET /app.php?fm=true&delete=.htaccess&path=/home/u996667838/domains/prudenture.com/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:38 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:39 +0330] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:39 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:40 +0330] "GET /admin.php?fm=true&delete=license.txt&path=/www/wwwroot/www.globalcasinolist.net/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:40 +0330] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:41 +0330] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:41 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:42 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:42 +0330] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:43 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:43 +0330] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:44 +0330] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:45 +0330] "GET /home.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:45 +0330] "GET /.well-known/pki-validation/about.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:46 +0330] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:47 +0330] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:47 +0330] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:48 +0330] "GET /text.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:48 +0330] "GET /.well-known/pki-validation/about.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:49 +0330] "GET /admin.php?fm=true&delete=license.txt&path=/home/u756317209/domains/regmaeducation.com/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:50 +0330] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:51 +0330] "GET /wp-content/admin.php?fm=true&delete=license.txt&path=/home/gcynslpl/clinicalpsychologistpretoria.com/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:51 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:52 +0330] "GET /1.php?option&path=/www/wwwroot/www.mkgseattlestore.com HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:53 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:53 +0330] "GET /bless.php?fm=true&delete=.htaccess.bk&path=/home/u392878141/domains/siigmatech.com/public_html/ HTTP/1.1" 301 795 "-" "-" 172.207.159.199 - - [30/Jul/2025:20:52:54 +0330] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 66.249.70.66 - - [31/Jul/2025:00:20:16 +0330] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 45.141.215.142 - - [31/Jul/2025:00:27:41 +0330] "GET / HTTP/1.1" 301 795 "-" "-" 43.130.67.33 - - [31/Jul/2025:00:47:04 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.163.242.76 - - [31/Jul/2025:01:37:15 +0330] "GET /gdftps.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.178.192.22 - - [31/Jul/2025:02:06:23 +0330] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:24 +0330] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:24 +0330] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:24 +0330] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:25 +0330] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:25 +0330] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:25 +0330] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:25 +0330] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:25 +0330] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:25 +0330] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:26 +0330] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:26 +0330] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:26 +0330] "GET /post.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:26 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:26 +0330] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:27 +0330] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:27 +0330] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:27 +0330] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:27 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:27 +0330] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:28 +0330] "GET /index.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:28 +0330] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:28 +0330] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:28 +0330] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:28 +0330] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:29 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:29 +0330] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:29 +0330] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:29 +0330] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:29 +0330] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:29 +0330] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:30 +0330] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:30 +0330] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:30 +0330] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:30 +0330] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:30 +0330] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:31 +0330] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:31 +0330] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:31 +0330] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:31 +0330] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:31 +0330] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:32 +0330] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:32 +0330] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:32 +0330] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:32 +0330] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:32 +0330] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:33 +0330] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:33 +0330] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:33 +0330] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:33 +0330] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:33 +0330] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:34 +0330] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.178.192.22 - - [31/Jul/2025:02:06:34 +0330] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 51.68.111.208 - - [31/Jul/2025:02:29:43 +0330] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 51.68.111.208 - - [31/Jul/2025:02:29:43 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.2; http://mj12bot.com/)" 74.176.198.37 - - [31/Jul/2025:03:00:01 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:02 +0330] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:02 +0330] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:03 +0330] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:03 +0330] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:04 +0330] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:05 +0330] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:05 +0330] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:06 +0330] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:06 +0330] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 74.176.198.37 - - [31/Jul/2025:03:00:07 +0330] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 84.17.43.163 - - [31/Jul/2025:03:07:04 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 130.33.58.73 - - [31/Jul/2025:06:54:48 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:50 +0330] "GET /403.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:50 +0330] "GET /content.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:51 +0330] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:51 +0330] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:52 +0330] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:52 +0330] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:53 +0330] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:53 +0330] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:54 +0330] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:54 +0330] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:55 +0330] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:56 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:56 +0330] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:57 +0330] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:57 +0330] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:58 +0330] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:58 +0330] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:59 +0330] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:54:59 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:00 +0330] "GET /img/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:01 +0330] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:01 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:02 +0330] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:02 +0330] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:03 +0330] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:03 +0330] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:04 +0330] "GET /.well-known/pki-validation/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:05 +0330] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:06 +0330] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 130.33.58.73 - - [31/Jul/2025:06:55:06 +0330] "GET /wp-content/updraft/about.php HTTP/1.1" 301 795 "-" "-" 43.153.86.78 - - [31/Jul/2025:06:46:16 +0330] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"