209.38.229.30 - - [26/Sep/2025:15:52:55 +0330] "POST /xmlrpc.php HTTP/1.1" 405 89 "http://optimyar.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.102 Safari/537.36" 209.38.229.30 - - [26/Sep/2025:15:52:58 +0330] "POST /wp-login.php HTTP/1.1" 302 20 "http://optimyar.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 209.38.229.30 - - [26/Sep/2025:15:53:02 +0330] "GET /not-found HTTP/1.1" 301 20 "http://optimyar.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.93 Safari/537.36" 105.154.108.46 - - [26/Sep/2025:16:37:39 +0330] "GET //login.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:37:48 +0330] "GET //Jada.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:37:54 +0330] "GET //zone.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:39:10 +0330] "GET //ObeQY2t7P.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:39:58 +0330] "GET //berax.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:40:08 +0330] "GET //ckmail.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:40:23 +0330] "GET //click.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:40:30 +0330] "GET //csv.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 216.244.66.243 - - [26/Sep/2025:16:41:40 +0330] "GET /robots.txt HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 105.154.108.46 - - [26/Sep/2025:16:41:42 +0330] "GET //ex.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:42:08 +0330] "GET //execlude.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:42:18 +0330] "GET //f8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:42:47 +0330] "GET //fix.php7 HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:42:55 +0330] "GET //goods.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:43:04 +0330] "GET //item.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:43:19 +0330] "GET //mah.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:44:31 +0330] "GET //content.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:44:52 +0330] "GET /r.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 196.196.52.5 - - [26/Sep/2025:15:52:55 +0330] "GET / HTTP/1.0" 301 0 "http://optimyar.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 177.1.253.231 - - [26/Sep/2025:16:04:28 +0330] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 105.154.108.46 - - [26/Sep/2025:16:38:44 +0330] "GET //403webshell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:38:52 +0330] "GET //MuPlugin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:39:01 +0330] "GET //O-Simple.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:39:34 +0330] "GET //admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:39:42 +0330] "GET //atomlib.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:40:45 +0330] "GET //database.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:40:52 +0330] "GET //database.php7 HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:41:02 +0330] "GET //db.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:41:25 +0330] "GET //defaults.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:41:33 +0330] "GET //documentroot.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:42:25 +0330] "GET //fix.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:43:41 +0330] "GET //makeasmtp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:43:50 +0330] "GET //malro.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:43:57 +0330] "GET //about.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:44:08 +0330] "GET //chosen.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:44:44 +0330] "GET /shop.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:44:57 +0330] "GET /y.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:45:24 +0330] "GET /b.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:45:42 +0330] "GET /e.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:45:57 +0330] "GET /aa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:46:31 +0330] "GET //core.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:46:55 +0330] "GET //lf_utchiha.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:47:27 +0330] "GET //wso.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:47:38 +0330] "GET //alfanew.php7 HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:48:12 +0330] "GET //utchiha_offer.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:48:20 +0330] "GET //style.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:48:30 +0330] "GET //xmlrpc.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:48:38 +0330] "GET //shell-script.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:49:11 +0330] "GET //simple.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:49:34 +0330] "GET //atomlib.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:49:44 +0330] "GET //wso112233.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:50:15 +0330] "GET //rain.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:50:30 +0330] "GET //rdpl.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:50:45 +0330] "GET //dnvokikk.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:51:37 +0330] "GET //ae.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:51:43 +0330] "GET //glppziux.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:52:28 +0330] "GET //srx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:53:20 +0330] "GET //doc.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:53:34 +0330] "GET //xx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:54:00 +0330] "GET //leafmailer2.8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:54:42 +0330] "GET //new.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:54:56 +0330] "GET //mailer.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:45:36 +0330] "GET /c.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:45:49 +0330] "GET /zz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:46:03 +0330] "GET /upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:46:09 +0330] "GET /wordpress.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:46:40 +0330] "GET //wso112233.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:46:48 +0330] "GET //zossipei.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:48:01 +0330] "GET //user.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:48:47 +0330] "GET //rdpl.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:50:06 +0330] "GET //xleet.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:50:58 +0330] "GET //contents.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:51:07 +0330] "GET //copy.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:51:29 +0330] "GET //fw.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:51:51 +0330] "GET //x.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:51:59 +0330] "GET //wso.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:52:58 +0330] "GET //ups.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:53:46 +0330] "GET //leaf.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:54:17 +0330] "GET //lf.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:54:28 +0330] "GET //alex.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:56:20 +0330] "GET //wso1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:56:44 +0330] "GET //priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:57:11 +0330] "GET //bb.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:57:50 +0330] "GET //haxor.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:55:08 +0330] "GET //marijuana.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:55:18 +0330] "GET //gaza.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:55:35 +0330] "GET //wp-admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:55:46 +0330] "GET //1index.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:55:57 +0330] "GET //3index.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:56:13 +0330] "GET //wikindex.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:56:32 +0330] "GET //alfa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:57:22 +0330] "GET //m.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:57:36 +0330] "GET //Lux.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:58:00 +0330] "GET //shell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:58:59 +0330] "GET //osx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:59:14 +0330] "GET //wp-content.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:59:49 +0330] "GET //404.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:00:12 +0330] "GET //wp-admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:00:37 +0330] "GET //azerty.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:01:24 +0330] "GET //cpanel.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:02:24 +0330] "GET //madspot.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:03:09 +0330] "GET //sYm.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:03:28 +0330] "GET //x.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:04:04 +0330] "GET //jo.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:04:18 +0330] "GET //wp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:04:54 +0330] "GET //d0main.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:58:09 +0330] "GET //osx.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:58:19 +0330] "GET //send.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:58:48 +0330] "GET //upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:59:23 +0330] "GET //wp-upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:16:59:40 +0330] "GET //wp-mail.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:00:01 +0330] "GET //asad.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:00:24 +0330] "GET //smtp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:00:48 +0330] "GET //dell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:01:00 +0330] "GET //WSO.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:01:13 +0330] "GET //dz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:01:40 +0330] "GET //cpn.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:01:59 +0330] "GET //sql.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:02:12 +0330] "GET //mysql.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:02:41 +0330] "GET //cp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:02:55 +0330] "GET //cpbt.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:03:40 +0330] "GET //r99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:03:52 +0330] "GET //lol.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:04:30 +0330] "GET //whmcs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:04:40 +0330] "GET //shellz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:06:16 +0330] "GET //Sh3ll.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:03 +0330] "GET //dom.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:30 +0330] "GET //c99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:05:07 +0330] "GET //d0mains.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:05:19 +0330] "GET /users.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:05:30 +0330] "GET //Cgishell.pl HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:05:38 +0330] "GET //killer.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:05:47 +0330] "GET //changeall.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:06:23 +0330] "GET //dz0.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:06:31 +0330] "GET //dam.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:06:41 +0330] "GET //user.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:11 +0330] "GET //whmcs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:23 +0330] "GET //r00t.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:37 +0330] "GET //gaza.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:45 +0330] "GET //1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:08:01 +0330] "GET /madspotshell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:08:17 +0330] "GET //c22.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:09:08 +0330] "GET //cp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:09:39 +0330] "GET /L3b.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:09:47 +0330] "GET /d.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:07:54 +0330] "GET //wp.zip HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:08:09 +0330] "GET //Sym.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:08:59 +0330] "GET //Cpanel.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:09:16 +0330] "GET //madspotshell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:09:59 +0330] "GET /tmp/d.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:04 +0330] "GET /tmp/L3b.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:33 +0330] "GET /upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:40 +0330] "GET /up.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:55 +0330] "GET /admin2.asp HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:03 +0330] "GET /uploads.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:08 +0330] "GET /sa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:25 +0330] "GET /admin1/ HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:49 +0330] "GET //r57.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:12:27 +0330] "GET //sa2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:12:35 +0330] "GET //2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:12:49 +0330] "GET /gaza.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:26 +0330] "GET /uploads.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:42 +0330] "GET /amad.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:48 +0330] "GET /t00.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:54 +0330] "GET /dz.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:59 +0330] "GET /Black.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:14:04 +0330] "GET /asp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:14:16 +0330] "GET /whmcs.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:15:01 +0330] "GET /dz1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:15:21 +0330] "GET /Symlink.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:15:31 +0330] "GET /sysadmin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:15:36 +0330] "GET /images/c99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:15:55 +0330] "GET /xd.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:28 +0330] "GET /admin1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:44 +0330] "GET /vb.zip HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:10:49 +0330] "GET /vb.rar HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:13 +0330] "GET /sysadmins/ HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:35 +0330] "GET /administration/Sym.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:42 +0330] "GET /images/Sym.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:11:59 +0330] "GET //shell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:12:07 +0330] "GET //sa.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:12:15 +0330] "GET //admin.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:12:58 +0330] "GET /up.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:04 +0330] "GET //upload.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:13:30 +0330] "GET /shell.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:14:39 +0330] "GET /d0maine.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:14:45 +0330] "GET /tmp/sql.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:14:57 +0330] "GET /tmp/dz1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:15:26 +0330] "GET /wp.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:16:01 +0330] "GET /c100.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:16:07 +0330] "GET /spy.aspx HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:16:28 +0330] "GET /xd.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:16:33 +0330] "GET /Server.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:10 +0330] "GET /priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:31 +0330] "GET /downloads/dom.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:16:38 +0330] "GET /wp-admin/c99.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:03 +0330] "GET /tmp/priv8.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:15 +0330] "GET /cgi.pl HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:19 +0330] "GET /tmp/cgi.pl HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:54 +0330] "GET /wp.zip HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:18:01 +0330] "GET /a.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:18:17 +0330] "GET /2.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:18:27 +0330] "GET /4.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 134.209.96.23 - - [26/Sep/2025:17:18:30 +0330] "GET / HTTP/1.1" 301 20 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 105.154.108.46 - - [26/Sep/2025:17:18:43 +0330] "GET /5.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:35 +0330] "GET /webadmin.html HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:40 +0330] "GET /admins.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:44 +0330] "GET /admins.asp HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:17:50 +0330] "GET /admins.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:18:07 +0330] "GET /w.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:18:12 +0330] "GET /1.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 105.154.108.46 - - [26/Sep/2025:17:18:23 +0330] "GET /3.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0" 103.131.71.84 - - [26/Sep/2025:17:18:27 +0330] "GET /robots.txt HTTP/1.1" 301 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 105.154.108.46 - - [26/Sep/2025:17:18:47 +0330] "GET /6.php HTTP/1.1" 301 20 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"