170.106.110.146 - - [30/Sep/2025:15:47:03 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.60.130.229 - - [30/Sep/2025:16:46:22 +0330] "GET /wp-content/cache/podlove/f0/c5047b6c27646d0396be8b0e23a250/rxeblxau_original.php?up=1 HTTP/1.1" 301 20 "www.google.com" "Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0" 5.121.205.77 - - [30/Sep/2025:16:03:34 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 14; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.155 Mobile Safari/537.36" 86.57.60.217 - - [30/Sep/2025:16:33:25 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 14; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.207 Mobile Safari/537.36" 62.60.130.229 - - [30/Sep/2025:16:46:14 +0330] "GET /index.php?podlove_image_cache_url=68747470733a2f2f6933302e627a2f6769662f6769662e706870&podlove_file_name=rxeblxau HTTP/1.1" 301 20 "www.google.com" "Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0" 24.141.3.59 - - [30/Sep/2025:16:47:32 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36" 106.216.105.95 - - [30/Sep/2025:17:07:43 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6.2 Mobile/22G100 Safari/604.1" 47.254.79.81 - - [30/Sep/2025:17:40:02 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 47.254.79.81 - - [30/Sep/2025:17:40:16 +0330] "GET /academic-co-working/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 47.254.79.81 - - [30/Sep/2025:17:40:17 +0330] "GET /%d8%a7%d8%b1%d8%aa%d8%a8%d8%a7%d8%b7-%d8%a8%d8%a7-%d8%b5%d9%86%d8%b9%d8%aa/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 47.254.79.81 - - [30/Sep/2025:17:40:50 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 47.254.79.81 - - [30/Sep/2025:17:40:51 +0330] "GET /sevices/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 47.254.79.81 - - [30/Sep/2025:17:40:55 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0" 62.113.116.213 - - [30/Sep/2025:17:45:35 +0330] "GET /hello-world/ HTTP/1.0" 301 0 "http://optimyar.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 136.226.107.74 - - [30/Sep/2025:18:08:15 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 5.211.198.48 - - [30/Sep/2025:18:02:50 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 14; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.155 Mobile Safari/537.36" 125.75.66.97 - - [30/Sep/2025:19:05:55 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.163.96.38 - - [30/Sep/2025:19:29:49 +0330] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 128.199.248.98 - - [30/Sep/2025:19:33:48 +0330] "GET /wp-login.php HTTP/1.1" 301 20 "-" "Mozilla/5.0" 172.5.174.118 - - [30/Sep/2025:19:53:06 +0330] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.159.152.4 - - [30/Sep/2025:20:12:31 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 48.210.45.29 - - [30/Sep/2025:20:34:03 +0330] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 169.150.203.245 - - [30/Sep/2025:20:38:01 +0330] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 196.251.71.181 - - [30/Sep/2025:20:49:48 +0330] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 194.163.190.237 - - [30/Sep/2025:21:01:20 +0330] "GET /wp-admin/css/ HTTP/1.1" 403 787 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.157.142.101 - - [30/Sep/2025:21:12:56 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.117.179.255 - - [30/Sep/2025:21:17:01 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 15; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.155 Mobile Safari/537.36" 208.84.101.55 - - [30/Sep/2025:22:54:46 +0330] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 69.160.160.59 - - [30/Sep/2025:22:58:07 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/92.0.4515.107 Safari/537.36" 69.160.160.59 - - [30/Sep/2025:22:58:50 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 69.160.160.59 - - [30/Sep/2025:22:58:54 +0330] "GET /sevices/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 196.251.86.13 - - [30/Sep/2025:23:01:14 +0330] "GET /sites/all/modules/plupload/plupload/examples/upload.php HTTP/1.1" 403 17008 "-" "ALittle Client" 182.42.110.255 - - [30/Sep/2025:22:54:46 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.160.160.59 - - [30/Sep/2025:22:58:00 +0330] "GET / HTTP/1.1" 301 20 "http://optimyar.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Nicecrawler/1.1; +http://www.nicecrawler.com/) Chrome/90.0.4430.97 Safari/537.36" 69.160.160.59 - - [30/Sep/2025:22:59:05 +0330] "GET /%d8%a7%d8%b1%d8%aa%d8%a8%d8%a7%d8%b7-%d8%a8%d8%a7-%d8%b5%d9%86%d8%b9%d8%aa/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 69.160.160.59 - - [30/Sep/2025:22:59:23 +0330] "GET /robots.txt HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 36.147.78.166 - - [30/Sep/2025:23:05:52 +0330] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 48.210.45.29 - - [30/Sep/2025:23:23:34 +0330] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 98.97.54.47 - - [30/Sep/2025:23:28:57 +0330] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.234.19.47 - - [30/Sep/2025:23:50:56 +0330] "GET /wp-content/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.74 - - [30/Sep/2025:23:51:01 +0330] "GET /wp-content/themes/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.85 - - [30/Sep/2025:23:51:07 +0330] "GET /wp-admin/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.62 - - [30/Sep/2025:23:51:23 +0330] "GET /chosen.php?p= HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.66 - - [30/Sep/2025:23:51:37 +0330] "GET /flower.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.28 - - [30/Sep/2025:23:52:05 +0330] "GET /akcc.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.85 - - [30/Sep/2025:23:52:10 +0330] "GET /abcd.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.74 - - [30/Sep/2025:23:52:16 +0330] "GET /flex.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.52 - - [30/Sep/2025:23:52:22 +0330] "GET /doc.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.70 - - [30/Sep/2025:23:52:27 +0330] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 104.234.19.46 - - [30/Sep/2025:23:52:32 +0330] "GET /akc.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.61 - - [30/Sep/2025:23:52:51 +0330] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.85 - - [30/Sep/2025:23:53:00 +0330] "GET /shlo.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.46 - - [30/Sep/2025:23:53:10 +0330] "GET /wp-editor.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 37.98.2.234 - - [30/Sep/2025:23:43:53 +0330] "GET /wp-content/uploads/2020/12/logo2.png HTTP/1.1" 200 4490 "https://optimyar.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1" 193.36.224.68 - - [30/Sep/2025:23:50:50 +0330] "GET /style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.34 - - [30/Sep/2025:23:51:17 +0330] "GET /wp-includes/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.52 - - [30/Sep/2025:23:51:32 +0330] "GET /file.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.178 - - [30/Sep/2025:23:51:41 +0330] "GET /gifclass.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.42 - - [30/Sep/2025:23:51:48 +0330] "GET /bless.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.67 - - [30/Sep/2025:23:51:53 +0330] "GET /class-t.api.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.70 - - [30/Sep/2025:23:51:59 +0330] "GET /blurbs.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.69 - - [30/Sep/2025:23:52:37 +0330] "GET /zoo.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.29 - - [30/Sep/2025:23:52:43 +0330] "GET //zwso.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.65 - - [30/Sep/2025:23:52:55 +0330] "GET /bolt.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.37 - - [30/Sep/2025:23:53:05 +0330] "GET /files.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 54.162.109.81 - - [01/Oct/2025:00:05:44 +0330] "GET /academic-co-working/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:05:52 +0330] "GET /%d8%a7%d8%b1%d8%aa%d8%a8%d8%a7%d8%b7-%d8%a8%d8%a7-%d8%b5%d9%86%d8%b9%d8%aa/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 45.149.173.203 - - [30/Sep/2025:23:58:21 +0330] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.162.109.81 - - [01/Oct/2025:00:02:48 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:02:57 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:03:04 +0330] "GET /sevices/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:03:11 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:03:53 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:05:58 +0330] "GET /tel:09120044190 HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 54.162.109.81 - - [01/Oct/2025:00:06:11 +0330] "GET /tel:+989120044190 HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" 172.236.44.163 - - [01/Oct/2025:00:12:56 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 14; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.207 Mobile Safari/537.36" 173.239.218.191 - - [01/Oct/2025:00:48:58 +0330] "GET /courses/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Mobile Safari/537.36" 65.109.193.158 - - [01/Oct/2025:01:05:17 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" 103.131.71.174 - - [01/Oct/2025:01:56:38 +0330] "GET /robots.txt HTTP/1.1" 301 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 142.147.245.32 - - [01/Oct/2025:02:38:53 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 139.155.139.22 - - [01/Oct/2025:02:43:50 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.222.165.167 - - [01/Oct/2025:03:01:40 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" 3.222.165.167 - - [01/Oct/2025:03:01:40 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 3.222.165.167 - - [01/Oct/2025:03:01:40 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 98.159.226.240 - - [01/Oct/2025:03:09:24 +0330] "GET / HTTP/1.0" 301 0 "http://optimyar.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 185.39.19.97 - - [01/Oct/2025:03:38:39 +0330] "GET / HTTP/1.0" 301 0 "http://optimyar.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 160.178.193.238 - - [01/Oct/2025:03:43:25 +0330] "GET /priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:43:46 +0330] "GET //Jada.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:00 +0330] "GET //zonexx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:16 +0330] "GET //MuPlugin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:22 +0330] "GET //O-Simple.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:30 +0330] "GET //ObeQY2t7P.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:36 +0330] "GET //admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:44 +0330] "GET //atomlib.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:59 +0330] "GET //ckmail.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:14 +0330] "GET //csv.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:28 +0330] "GET //database.php7 HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:42 +0330] "GET //defaults.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:11 +0330] "GET //f8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:19 +0330] "GET //fix.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:47 +0330] "GET //item.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:15 +0330] "GET //about.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:36 +0330] "GET //shop.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:49 +0330] "GET //y.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 149.40.53.3 - - [01/Oct/2025:03:36:18 +0330] "GET / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 160.178.193.238 - - [01/Oct/2025:03:43:18 +0330] "GET //rest.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:43:31 +0330] "GET //sx21_1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:43:39 +0330] "GET //login.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:43:53 +0330] "GET //zone.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:08 +0330] "GET //403webshell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:44:52 +0330] "GET //berax.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:07 +0330] "GET //click.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:21 +0330] "GET //database.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:35 +0330] "GET //db.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:49 +0330] "GET //documentroot.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:45:56 +0330] "GET //ex.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:04 +0330] "GET //execlude.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:26 +0330] "GET //fix.php7 HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:33 +0330] "GET //goods.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:40 +0330] "GET //inputs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:46:54 +0330] "GET //mah.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:01 +0330] "GET //asmtp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:08 +0330] "GET //malro.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:22 +0330] "GET //chosen.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:29 +0330] "GET //content.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:43 +0330] "GET //r.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:03 +0330] "GET //b.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:10 +0330] "GET //c.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:24 +0330] "GET //zz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:38 +0330] "GET //upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:45 +0330] "GET //wordpress.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:52 +0330] "GET //core.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:12 +0330] "GET //lf_utchiha.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:27 +0330] "GET //wso.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:41 +0330] "GET //user.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:55 +0330] "GET //style.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:06 +0330] "GET //shell-script.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:28 +0330] "GET //atomlib.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:35 +0330] "GET //wso112233.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:42 +0330] "GET //xleet.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:02 +0330] "GET //dnvokikk.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:09 +0330] "GET //contents.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:30 +0330] "GET //ae.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:37 +0330] "GET //glppziux.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:57 +0330] "GET //srx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:04 +0330] "GET //1337.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:18 +0330] "GET //doc.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:25 +0330] "GET //xx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:47:56 +0330] "GET //a.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:17 +0330] "GET //e.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:31 +0330] "GET //aa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:48:59 +0330] "GET //wso112233.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:06 +0330] "GET //zossipei.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:19 +0330] "GET //ninjasec.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:34 +0330] "GET //alfanew.php7 HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:49:48 +0330] "GET //utchiha_offer.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:02 +0330] "GET //xmlrpc.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 196.244.192.45 - - [01/Oct/2025:03:50:12 +0330] "GET / HTTP/1.0" 301 0 "http://optimyar.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 160.178.193.238 - - [01/Oct/2025:03:50:13 +0330] "GET //rdpl.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:20 +0330] "GET //simple.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:48 +0330] "GET //rain.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:50:55 +0330] "GET //rdpl.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:16 +0330] "GET //copy.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:23 +0330] "GET //fw.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:44 +0330] "GET //x.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:51:51 +0330] "GET //wso.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:11 +0330] "GET //ups.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:40 +0330] "GET //leafmailer2.8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:46 +0330] "GET //lf.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:14 +0330] "GET //marijuana.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:21 +0330] "GET //gaza.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:29 +0330] "GET //wp-admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:42 +0330] "GET //3index.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:50 +0330] "GET //wikindex.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 37.131.110.189 - - [01/Oct/2025:03:53:58 +0330] "GET /mail/config-v1.1.xml?emailaddress=@admin HTTP/1.1" 301 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 160.178.193.238 - - [01/Oct/2025:03:54:05 +0330] "GET //alfa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:54:12 +0330] "GET //priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:54:26 +0330] "GET //m.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:54:41 +0330] "GET //haxor.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:54:48 +0330] "GET //shell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:02 +0330] "GET //send.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:10 +0330] "GET //uplo.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:37 +0330] "GET //wp-upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:44 +0330] "GET //wp-mail.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:47 +0330] "GET //404.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:54 +0330] "GET //asad.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:07 +0330] "GET //smtp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:15 +0330] "GET //azerty.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:37 +0330] "GET //dz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:58 +0330] "GET //sql.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:12 +0330] "GET //madspot.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:19 +0330] "GET //cp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:32 +0330] "GET //leaf.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:52:53 +0330] "GET //alex.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:00 +0330] "GET //new.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:07 +0330] "GET //mailer.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:35 +0330] "GET //1index.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:53:57 +0330] "GET //wso1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 45.55.112.20 - - [01/Oct/2025:03:54:02 +0330] "GET /mail/config-v1.1.xml HTTP/1.1" 301 20 "31.214.174.197" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:59.0) Gecko/20100101 Firefox/59.0" 45.55.112.20 - - [01/Oct/2025:03:54:02 +0330] "GET / HTTP/1.1" 301 20 "31.214.174.197" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:59.0) Gecko/20100101 Firefox/59.0" 182.48.76.3 - - [01/Oct/2025:03:54:14 +0330] "GET /autodiscover/autodiscover.xml HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 160.178.193.238 - - [01/Oct/2025:03:54:19 +0330] "GET //bb.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:54:33 +0330] "GET //Lux.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:54:55 +0330] "GET //osx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:16 +0330] "GET //upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:23 +0330] "GET //osx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:55:30 +0330] "GET //wp-content.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:01 +0330] "GET //wp-admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:23 +0330] "GET //dell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:30 +0330] "GET //WSO.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:44 +0330] "GET //cpanel.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:56:51 +0330] "GET //cpn.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:05 +0330] "GET //mysql.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:33 +0330] "GET //sYm.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:26 +0330] "GET //cpbt.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:47 +0330] "GET //r99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:54 +0330] "GET //lol.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:08 +0330] "GET //wp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:14 +0330] "GET //whmcs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:21 +0330] "GET //shellz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:28 +0330] "GET //d0main.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:45 +0330] "GET //Cgishell.pl HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:52 +0330] "GET //killer.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:59 +0330] "GET //changeall.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:14 +0330] "GET //Sh3ll.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:35 +0330] "GET //user.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:41 +0330] "GET //dom.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:03 +0330] "GET //c99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:25 +0330] "GET //wp.zip HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:33 +0330] "GET /madspotshell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:37 +0330] "GET //Sym.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:44 +0330] "GET //c22.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:51 +0330] "GET //c100.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:59 +0330] "GET //Cpanel.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:16 +0330] "GET //madspotshell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:37 +0330] "GET /tmp/L3b.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:57:40 +0330] "GET //x.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:01 +0330] "GET //jo.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:34 +0330] "GET //d0mains.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:58:40 +0330] "GET /users.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:07 +0330] "GET //2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:21 +0330] "GET //dz0.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:28 +0330] "GET //dam.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:49 +0330] "GET //whmcs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:03:59:56 +0330] "GET //r00t.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:11 +0330] "GET //gaza.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:00:18 +0330] "GET //1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:09 +0330] "GET //cp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:23 +0330] "GET /L3b.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:28 +0330] "GET /d.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:33 +0330] "GET /tmp/d.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:41 +0330] "GET /admin1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:46 +0330] "GET /upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:05 +0330] "GET /sa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:09 +0330] "GET /sysadmins/ HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:19 +0330] "GET /administration/Sym.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:24 +0330] "GET /images/Sym.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:28 +0330] "GET //r57.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:42 +0330] "GET //sa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:19 +0330] "GET //upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:26 +0330] "GET /uploads.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:46 +0330] "GET /dz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:04 +0330] "GET /d0maine.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:08 +0330] "GET /tmp/sql.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:27 +0330] "GET /wp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:51 +0330] "GET /up.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:01:55 +0330] "GET /admin2.asp HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:00 +0330] "GET /uploads.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:14 +0330] "GET /admin1/ HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:35 +0330] "GET //shell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:49 +0330] "GET //admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:02:56 +0330] "GET //sa2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:03 +0330] "GET //2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:10 +0330] "GET /gaza.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:14 +0330] "GET /up.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:31 +0330] "GET /shell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:36 +0330] "GET /amad.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:41 +0330] "GET /t00.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:50 +0330] "GET /Black.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:55 +0330] "GET /asp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:03:59 +0330] "GET /whmcs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:12 +0330] "GET /tmp/dz1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:17 +0330] "GET /dz1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:22 +0330] "GET /Symlink.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:31 +0330] "GET /sysadmin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:36 +0330] "GET /images/c99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:50 +0330] "GET /xd.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:59 +0330] "GET /wp-admin/c99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:08 +0330] "GET /tmp/priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:17 +0330] "GET /admins.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:32 +0330] "GET /1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:37 +0330] "GET /2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:41 +0330] "GET /3.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:46 +0330] "GET /4.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:55 +0330] "GET /6.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:18 +0330] "GET /database.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:27 +0330] "GET /index.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:35 +0330] "GET /inputs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:44 +0330] "GET /qkyplyur.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:03 +0330] "GET /ttcecnmc.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:08 +0330] "GET /txfpcuhw.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:18 +0330] "GET /unZIPpeRqyr.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:37 +0330] "GET /webhook.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:42 +0330] "GET /wp-atom.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:51 +0330] "GET /wp-pano.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:55 +0330] "GET /wqjtejxi.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:08:00 +0330] "GET /wso112233.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:08:17 +0330] "GET //shadow.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:41 +0330] "GET /xd.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:45 +0330] "GET /c100.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:04:55 +0330] "GET /Server.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:12 +0330] "GET /priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:21 +0330] "GET /a.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:27 +0330] "GET /w.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:05:51 +0330] "GET /5.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:00 +0330] "GET /amhlzdhk.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:07 +0330] "GET /balance.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:13 +0330] "GET /curl.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:23 +0330] "GET /hyivatpf.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:39 +0330] "GET /nf_tracking.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:48 +0330] "GET /slax.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:53 +0330] "GET /tesTlme.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:06:57 +0330] "GET /todo.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:13 +0330] "GET /unzipper.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:23 +0330] "GET /ut.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:27 +0330] "GET /utchiha2023.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:07:32 +0330] "GET /uuhoxcyb.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:08:05 +0330] "GET /zvpqaqfb.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:08:10 +0330] "GET //xl2023.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 160.178.193.238 - - [01/Oct/2025:04:08:24 +0330] "GET //plugin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 196.244.192.43 - - [01/Oct/2025:04:57:40 +0330] "GET / HTTP/1.0" 301 0 "http://optimyar.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 84.247.146.179 - - [01/Oct/2025:05:31:37 +0330] "GET / HTTP/1.1" 301 0 "-" "-" 18.246.69.10 - - [01/Oct/2025:05:59:38 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 106.119.167.146 - - [01/Oct/2025:06:20:53 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.144.19.215 - - [01/Oct/2025:08:26:50 +0330] "GET /wp-admin/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.118 - - [01/Oct/2025:08:27:05 +0330] "GET /chosen.php?p= HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.32 - - [01/Oct/2025:08:27:13 +0330] "GET /file.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.130 - - [01/Oct/2025:08:27:18 +0330] "GET /flower.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.35 - - [01/Oct/2025:08:27:28 +0330] "GET /bless.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.1 - - [01/Oct/2025:08:27:32 +0330] "GET /class-t.api.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.121 - - [01/Oct/2025:08:27:37 +0330] "GET /blurbs.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 193.36.224.38 - - [01/Oct/2025:08:27:56 +0330] "GET /bs5.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.33 - - [01/Oct/2025:08:28:00 +0330] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.118 - - [01/Oct/2025:08:28:06 +0330] "GET /akc.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.36 - - [01/Oct/2025:08:28:23 +0330] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.214 - - [01/Oct/2025:08:26:35 +0330] "GET /style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.141 - - [01/Oct/2025:08:26:41 +0330] "GET /wp-content/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.35 - - [01/Oct/2025:08:26:45 +0330] "GET /wp-content/themes/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.217 - - [01/Oct/2025:08:27:00 +0330] "GET /wp-includes/style.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.35 - - [01/Oct/2025:08:27:23 +0330] "GET /gifclass.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.215 - - [01/Oct/2025:08:27:42 +0330] "GET /akcc.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.129 - - [01/Oct/2025:08:27:47 +0330] "GET /abcd.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.121 - - [01/Oct/2025:08:27:52 +0330] "GET /aku.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.1 - - [01/Oct/2025:08:28:11 +0330] "GET /zoo.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.117 - - [01/Oct/2025:08:28:16 +0330] "GET //zwso.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.218 - - [01/Oct/2025:08:28:28 +0330] "GET /bolt.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 136.144.19.30 - - [01/Oct/2025:08:28:34 +0330] "GET /shlo.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.166 - - [01/Oct/2025:08:28:39 +0330] "GET /1.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 216.24.219.121 - - [01/Oct/2025:08:28:44 +0330] "GET /aa.php HTTP/1.1" 301 20 "-" "Go-http-client/1.1" 106.128.100.19 - - [01/Oct/2025:08:31:38 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6.2 Mobile/22G100 Safari/604.1" 216.244.66.243 - - [01/Oct/2025:08:41:07 +0330] "GET /robots.txt HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 137.184.15.18 - - [01/Oct/2025:09:35:31 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0" 157.230.23.213 - - [01/Oct/2025:09:39:41 +0330] "GET / HTTP/1.1" 301 0 "-" "-" 5.113.100.114 - - [01/Oct/2025:09:45:31 +0330] "GET /sevices/ HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 43.135.144.126 - - [01/Oct/2025:09:58:59 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.125.108.157 - - [01/Oct/2025:10:38:33 +0330] "GET /wp-content/uploads/2020/12/logo2.png HTTP/1.1" 200 4490 "https://optimyar.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/21E219 Safari/604.1" 173.208.248.50 - - [01/Oct/2025:10:59:12 +0330] "GET / HTTP/1.1" 301 0 "-" "Java/14.0.2" 173.208.248.50 - - [01/Oct/2025:10:59:23 +0330] "GET / HTTP/1.1" 301 0 "-" "Java/14.0.2" 43.159.152.184 - - [01/Oct/2025:10:52:31 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 48.210.45.29 - - [01/Oct/2025:10:57:26 +0330] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 48.210.45.29 - - [01/Oct/2025:11:11:49 +0330] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:23:05 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:23:46 +0330] "GET /wp-admin/css/index.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:24:24 +0330] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 403 6633 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:24:42 +0330] "GET /wp-admin/css/colors/index.php HTTP/1.1" 403 6633 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:24:53 +0330] "GET /wp-content/languages/index.php HTTP/1.1" 403 6633 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:25:52 +0330] "GET /wp-content/plugins/about.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:26:11 +0330] "GET /geju.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:26:30 +0330] "GET /wp.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:22:49 +0330] "GET /wp-admin/network/index.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:23:26 +0330] "GET /wp-admin/images/index.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:24:11 +0330] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 403 6633 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:25:19 +0330] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.86.72.218 - - [01/Oct/2025:11:25:38 +0330] "GET /wp-content/IXR/index.php HTTP/1.1" 403 6635 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 196.244.192.45 - - [01/Oct/2025:11:45:01 +0330] "GET / HTTP/1.0" 301 0 "http://optimyar.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.64.52.250 - - [01/Oct/2025:11:57:12 +0330] "GET / HTTP/1.1" 301 20 "-" "Python/3.10 aiohttp/3.12.13" 138.117.63.239 - - [01/Oct/2025:12:42:57 +0330] "GET http://www.optimyar.com/?trk=organization_guest_main-feed-card-text HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/78.0.3904.108 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:34 +0330] "POST / HTTP/1.1" 200 32682 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:38 +0330] "GET /.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:41 +0330] "GET /app/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:50 +0330] "GET /backend/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:51 +0330] "GET /backend/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:52 +0330] "GET /server/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:54 +0330] "GET /server/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:55 +0330] "GET /api/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:58 +0330] "GET /core/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:00 +0330] "GET /core/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:01 +0330] "GET /dev/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:03 +0330] "GET /dev/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:04 +0330] "GET /frontend/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:06 +0330] "GET /frontend/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:07 +0330] "GET /admin/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:10 +0330] "GET /old/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:11 +0330] "GET /old/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:14 +0330] "GET /system/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:20 +0330] "GET /web/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:23 +0330] "GET /site/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:24 +0330] "GET /backup/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:39 +0330] "GET /.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:42 +0330] "GET /app/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:44 +0330] "GET /apps/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:45 +0330] "GET /apps/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:47 +0330] "GET /laravel/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:48 +0330] "GET /laravel/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:03:57 +0330] "GET /api/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:09 +0330] "GET /admin/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:13 +0330] "GET /system/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:16 +0330] "GET /systems/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:17 +0330] "GET /systems/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:18 +0330] "GET /web/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:21 +0330] "GET /site/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:26 +0330] "GET /backup/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:33 +0330] "GET /v1/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:27 +0330] "GET /client/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:28 +0330] "GET /client/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:30 +0330] "GET /v2/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:31 +0330] "GET /v2/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.96.236 - - [01/Oct/2025:13:04:34 +0330] "GET /v1/.env HTTP/1.1" 301 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.131.71.101 - - [01/Oct/2025:13:20:58 +0330] "GET /robots.txt HTTP/1.1" 301 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 42.119.143.78 - - [01/Oct/2025:13:37:16 +0330] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 129.211.215.233 - - [01/Oct/2025:13:58:18 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"