ÿØÿà JFIF    ÿÛ „  ( %!1!%*+...983,7(-.- PK!˜Âé}ÑþÑþmehradhospital.irnu€žÙ˜ 49.51.52.250 - - [27/Feb/2026:15:59:16 +0330] "GET /ff1.php HTTP/1.1" 200 10809 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.244.192 - - [27/Feb/2026:16:12:58 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10862 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.22.109 - - [27/Feb/2026:16:17:33 +0330] "GET / HTTP/1.1" 200 900 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.148.92 - - [27/Feb/2026:16:22:47 +0330] "GET /ff1.php?fm=true&rename=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9048 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.145.117 - - [27/Feb/2026:17:12:35 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10840 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.133.241 - - [27/Feb/2026:17:22:49 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10807 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.156.190 - - [27/Feb/2026:17:32:14 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 24142 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.134.141.244 - - [27/Feb/2026:15:45:44 +0330] "GET / HTTP/1.1" 200 902 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.9.111 - - [27/Feb/2026:16:33:56 +0330] "GET /ff1.php?fm=true&edit=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 35114 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.166.228 - - [27/Feb/2026:16:42:21 +0330] "GET /ff1.php?fm=true&rename=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8966 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.156.204.134 - - [27/Feb/2026:16:51:51 +0330] "GET /ff1.php?fm_settings=true HTTP/1.1" 200 9930 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.182.43 - - [27/Feb/2026:17:03:56 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8973 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /class-t.api.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /zwso.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /class19.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:58 +0330] "GET /class20.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:58 +0330] "GET /admin.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:58 +0330] "GET /randkeyword.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:59 +0330] "GET /fwe.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:59 +0330] "GET /images/m.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:37:59 +0330] "GET /g.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /tx1.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /xv.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /x56.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /htaccess.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /readme.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:01 +0330] "GET /x50.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:01 +0330] "GET /fv.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:02 +0330] "GET /file.php? HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:02 +0330] "GET /lsd.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:02 +0330] "GET /as.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /wsd.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /gtc.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /atx.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /z60.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /m.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /themes.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /click.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:05 +0330] "GET /install.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:05 +0330] "GET /lv.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:05 +0330] "GET /simple.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /w.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /ioxi-o.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /0x.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /222.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /wp-content/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /admin.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /classwithtostring.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /abcd.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /inputs.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /manager.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /item.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /plugins/Cache/footer.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /mail.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:11 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:11 +0330] "GET /sx.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:11 +0330] "GET /wp-admin/maint/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /1.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /byp.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /wp-trackback.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /.well-known/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-admin/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /gmo.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /css/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /filemanager/dialog.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /index/function.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /uploads/autoload_classmap.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /ww1.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /about/function.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /admin/function.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:16 +0330] "GET /security.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-content/radio.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /.well-known/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /wp-content/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /.well-known/log.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /class.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /bless5.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /lock360.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /f35.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /ioxi-o1.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /juuuu.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /ha.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /gg.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /we2.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /04.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /333.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /520.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /ar.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /x.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /xx.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /gifclass4.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /2clas.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /ave.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /wrt.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /bibil.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /radio.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /files.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /file7.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /gifclass.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 404 796 "-" "-" 43.153.73.200 - - [27/Feb/2026:17:43:26 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 7132 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /nox.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /file48.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /info.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /class9.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /la.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:26 +0330] "GET /bless11.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:26 +0330] "GET /ccou.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /ton.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /file9.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /ac.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /new4.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /pop.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /az.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /xaz.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /up4.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /1aa.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /elp.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:29 +0330] "GET /wtz.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:29 +0330] "GET /galex.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:29 +0330] "GET /xb.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:30 +0330] "GET /ova.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:30 +0330] "GET /vx.php HTTP/1.1" 404 796 "-" "-" 20.104.124.39 - - [27/Feb/2026:17:38:30 +0330] "GET /rh.php HTTP/1.1" 404 796 "-" "-" 43.133.91.48 - - [27/Feb/2026:17:52:23 +0330] "GET /ff1.php?fm_settings=true&fm_config_delete=true HTTP/1.1" 200 118 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.111.215 - - [27/Feb/2026:18:24:02 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.215 - - [27/Feb/2026:18:24:02 +0330] "GET / HTTP/1.1" 200 743 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 145.239.65.133 - - [27/Feb/2026:20:04:14 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 145.239.65.133 - - [27/Feb/2026:20:04:16 +0330] "GET /ff1.php HTTP/1.1" 200 9989 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 145.239.65.133 - - [27/Feb/2026:20:04:17 +0330] "GET /include.php HTTP/1.1" 200 3165 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 182.44.10.67 - - [27/Feb/2026:20:07:40 +0330] "GET / HTTP/1.1" 200 903 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.111.205 - - [27/Feb/2026:20:38:20 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.205 - - [27/Feb/2026:20:38:21 +0330] "GET / HTTP/1.1" 200 746 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 192.71.23.211 - - [27/Feb/2026:21:20:14 +0330] "GET / HTTP/1.1" 200 899 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 3.214.10.111 - - [27/Feb/2026:21:23:17 +0330] "GET / HTTP/1.1" 200 899 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 43.133.69.37 - - [27/Feb/2026:21:39:53 +0330] "GET / HTTP/1.1" 200 903 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 94.103.87.20 - - [27/Feb/2026:22:01:42 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 94.103.87.20 - - [27/Feb/2026:22:01:44 +0330] "GET /ff1.php HTTP/1.1" 200 10043 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 20.220.144.87 - - [27/Feb/2026:22:21:14 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-" 20.220.144.87 - - [27/Feb/2026:22:21:15 +0330] "GET /god.php HTTP/1.1" 404 796 "-" "-" 20.220.144.87 - - [27/Feb/2026:22:21:15 +0330] "GET /bs4.PhP7 HTTP/1.1" 404 796 "-" "-" 20.220.144.87 - - [27/Feb/2026:22:21:15 +0330] "GET /ff1.php HTTP/1.1" 200 28859 "-" "-" 43.157.188.74 - - [27/Feb/2026:23:05:58 +0330] "GET / HTTP/1.1" 200 898 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.122.114.33 - - [27/Feb/2026:23:11:24 +0330] "GET / HTTP/1.1" 200 900 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 43.166.131.228 - - [27/Feb/2026:23:21:36 +0330] "GET /ff1.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 152.53.187.237 - - [27/Feb/2026:23:22:37 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:39 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 280 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:41 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 2107 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:43 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 1653 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:45 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 23944 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:49 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 32625 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:53 +0330] "GET /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8612 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:55 +0330] "GET /ff1.php?fm=true&edit=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:57 +0330] "GET /ff1.php?fm=true&edit=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 25490 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:22:59 +0330] "GET /ff1.php?fm=true&edit=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10026 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:02 +0330] "GET /ff1.php?fm=true&edit=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 40994 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:04 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/. HTTP/1.1" 200 10047 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:08 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.. HTTP/1.1" 200 11696 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:10 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known HTTP/1.1" 200 9396 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:12 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin HTTP/1.1" 200 9115 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:14 +0330] "GET /ff1.php?fm=true&rename=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:17 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:19 +0330] "GET /ff1.php?fm=true&rename=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:22 +0330] "GET /ff1.php?fm=true&rename=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:37 +0330] "GET /ff1.php?fm=true&rename=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:39 +0330] "GET /ff1.php?fm=true&rename=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:42 +0330] "GET /ff1.php?fm=true&rename=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:44 +0330] "GET /ff1.php?fm=true&rights=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8437 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:47 +0330] "GET /ff1.php?fm=true&rights=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8468 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:50 +0330] "GET /ff1.php?fm=true&rights=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8460 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:52 +0330] "GET /ff1.php?fm=true&rights=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8438 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:55 +0330] "GET /ff1.php?fm=true&rights=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:23:58 +0330] "GET /ff1.php?fm=true&rights=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:00 +0330] "GET /ff1.php?fm=true&rights=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:02 +0330] "GET /ff1.php?fm_settings=true HTTP/1.1" 200 9277 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:04 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10010 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:07 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10040 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:09 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 10225 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:12 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 10350 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:15 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 10464 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:17 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 10596 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:20 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 10828 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:22 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 21849 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:24 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 6785 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:29 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10725 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 152.53.187.237 - - [27/Feb/2026:23:24:31 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10684 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 119.28.89.249 - - [27/Feb/2026:23:39:03 +0330] "GET /ff1.php?fm=true&edit=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 12510 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.35.153 - - [27/Feb/2026:23:54:16 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/. HTTP/1.1" 200 11590 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.108.78.33 - - [27/Feb/2026:23:59:06 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 280 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:08 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 2994 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 23942 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 32627 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:15 +0330] "GET /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8614 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:18 +0330] "GET /ff1.php?fm=true&edit=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 25525 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:20 +0330] "GET /ff1.php?fm=true&edit=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10082 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:38 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.. HTTP/1.1" 200 11732 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:42 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin HTTP/1.1" 200 9106 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:43 +0330] "GET /ff1.php?fm=true&rename=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:47 +0330] "GET /ff1.php?fm=true&rename=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:50 +0330] "GET /ff1.php?fm=true&rename=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8423 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:54 +0330] "GET /ff1.php?fm=true&rename=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:57 +0330] "GET /ff1.php?fm=true&rights=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8463 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:59 +0330] "GET /ff1.php?fm=true&rights=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8461 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:04 +0330] "GET /ff1.php?fm=true&rights=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:07 +0330] "GET /ff1.php?fm_settings=true HTTP/1.1" 200 9266 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:11 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10740 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:13 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:18 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:23 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 6799 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:27 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10749 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 43.133.253.253 - - [27/Feb/2026:23:47:06 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 6854 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 65.108.78.33 - - [27/Feb/2026:23:59:05 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:10 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 1655 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:17 +0330] "GET /ff1.php?fm=true&edit=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 11514 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:22 +0330] "GET /ff1.php?fm=true&edit=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 41104 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:24 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/. HTTP/1.1" 200 10746 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:40 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known HTTP/1.1" 200 9410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:45 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:48 +0330] "GET /ff1.php?fm=true&rename=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8428 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:52 +0330] "GET /ff1.php?fm=true&rename=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [27/Feb/2026:23:59:55 +0330] "GET /ff1.php?fm=true&rights=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8438 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:00 +0330] "GET /ff1.php?fm=true&rights=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8437 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:02 +0330] "GET /ff1.php?fm=true&rights=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:06 +0330] "GET /ff1.php?fm=true&rights=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:09 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10723 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:14 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 10854 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:16 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:19 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:21 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 21873 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:00:00:25 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10752 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 43.130.91.95 - - [28/Feb/2026:00:07:22 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8972 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.15.147 - - [28/Feb/2026:00:18:13 +0330] "GET /ff1.php?fm=true&rights=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9053 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.72.93 - - [28/Feb/2026:00:26:27 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 32845 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.3.120 - - [28/Feb/2026:00:36:04 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 11696 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.155.129.131 - - [28/Feb/2026:00:45:17 +0330] "GET /ff1.php?fm=true&rights=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9058 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.244.66 - - [28/Feb/2026:00:59:15 +0330] "GET /ff1.php?fm=true&edit=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9353 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.161.78 - - [28/Feb/2026:01:06:57 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 7132 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.233.46 - - [28/Feb/2026:01:16:20 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 24145 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 188.165.208.215 - - [28/Feb/2026:01:46:01 +0330] "GET /cgi-bin/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0" 13.71.191.191 - - [28/Feb/2026:02:16:11 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:11 +0330] "GET /plugins.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:11 +0330] "GET /erty.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /sa.php7 HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /ws77.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /wp9.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /lp6.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /ms-edit.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /wp-the.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /gifclass.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /hplfuns.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /8.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /shop.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /cxxuv.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /b.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /gi.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /e0v9e95c.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /2gz1dxix.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /ws75.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /ws49.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /bak.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /Y5MxLiVO9nK.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /wp-f.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /install.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /tx78.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /wp_bqLC0MQe.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /0bb45ctt.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /ws80.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /tx79.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /jp.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /sbhu.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /tt.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /62ix02bk.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /wdf.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /f6ijmjpa.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /wp_jVML8V37.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /4wj632p1.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /ws81.php HTTP/1.1" 404 796 "-" "-" 13.71.191.191 - - [28/Feb/2026:02:16:18 +0330] "GET /e31hmf9b.php HTTP/1.1" 404 796 "-" "-" 182.42.111.213 - - [28/Feb/2026:02:53:35 +0330] "GET / HTTP/1.1" 200 1484 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-" 20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /god.php HTTP/1.1" 404 796 "-" "-" 20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /bs4.PhP7 HTTP/1.1" 404 796 "-" "-" 20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /ff1.php HTTP/1.1" 200 37807 "-" "-" 65.108.78.33 - - [28/Feb/2026:03:04:38 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:04:52 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:04:54 +0330] "GET /ff1.php?fm=true&rename=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:01 +0330] "GET /ff1.php?fm=true&rename=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:04 +0330] "GET /ff1.php?fm=true&rename=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8409 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:11 +0330] "GET /ff1.php?fm=true&rename=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:13 +0330] "GET /ff1.php?fm=true&rename=www&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:14 +0330] "GET /ff1.php?fm=true&rights=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:18 +0330] "GET /ff1.php?fm=true&rights=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:20 +0330] "GET /ff1.php?fm=true&rights=.koality&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:21 +0330] "GET /ff1.php?fm=true&rights=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:24 +0330] "GET /ff1.php?fm=true&rights=.razor&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:30 +0330] "GET /ff1.php?fm=true&rights=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:35 +0330] "GET /ff1.php?fm=true&rights=acme-challenge&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 8464 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:40 +0330] "GET /ff1.php?fm=true&rights=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:44 +0330] "GET /ff1.php?fm=true&rights=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8439 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:45 +0330] "GET /ff1.php?fm=true&rights=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8438 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:04:40 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc HTTP/1.1" 200 9580 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:04:56 +0330] "GET /ff1.php?fm=true&rename=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8430 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:04:57 +0330] "GET /ff1.php?fm=true&rename=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:04:59 +0330] "GET /ff1.php?fm=true&rename=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:02 +0330] "GET /ff1.php?fm=true&rename=logs&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:06 +0330] "GET /ff1.php?fm=true&rename=mail&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:08 +0330] "GET /ff1.php?fm=true&rename=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:09 +0330] "GET /ff1.php?fm=true&rename=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:16 +0330] "GET /ff1.php?fm=true&rights=.htpasswds&path=/home/mehradh2/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:23 +0330] "GET /ff1.php?fm=true&rights=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:26 +0330] "GET /ff1.php?fm=true&rights=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:28 +0330] "GET /ff1.php?fm=true&rights=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:31 +0330] "GET /ff1.php?fm=true&rights=.trash&path=/home/mehradh2/ HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:33 +0330] "GET /ff1.php?fm=true&rights=access-logs&path=/home/mehradh2/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:37 +0330] "GET /ff1.php?fm=true&rights=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:38 +0330] "GET /ff1.php?fm=true&rights=etc&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:42 +0330] "GET /ff1.php?fm=true&rights=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:47 +0330] "GET /ff1.php?fm=true&rights=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8444 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:52 +0330] "GET /ff1.php?fm=true&rights=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:56 +0330] "GET /ff1.php?fm=true&rights=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:49 +0330] "GET /ff1.php?fm=true&rights=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8439 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:50 +0330] "GET /ff1.php?fm=true&rights=logs&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:54 +0330] "GET /ff1.php?fm=true&rights=mail&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:57 +0330] "GET /ff1.php?fm=true&rights=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.78.33 - - [28/Feb/2026:03:05:59 +0330] "GET /ff1.php?fm=true&rights=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:36 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:38 +0330] "GET /'%20.%20$url_inc%20.%20'&edit='%20.%20$file%20.%20'&path='%20.%20$path.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:41 +0330] "GET /'%20.%20$url_inc%20.%20'&rights='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:44 +0330] "GET /'.$url_inc.'&delete='.$destination.'&path='%20.%20$path.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:48 +0330] "GET /'.fm_site_url().' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:50 +0330] "GET /'.fm_url($full).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:55 +0330] "GET /%3C?%3E HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:57 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 197 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:02 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 279 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 267 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:07 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 101 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:09 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLnRhcg== HTTP/1.1" 200 372 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:14 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9nLnRhci5neg== HTTP/1.1" 200 5996 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:16 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 1737 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:22 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC5waHAudGFyLmd6 HTTP/1.1" 200 24699 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:25 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAudGFy HTTP/1.1" 200 32721 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:27 +0330] "GET /ff1.php?fm=true&delete=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10736 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:29 +0330] "GET /ff1.php?fm=true&delete=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10580 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:37 +0330] "GET /ff1.php?fm=true&edit=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8552 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:40 +0330] "GET /'%20.%20$url_inc%20.%20'&rename='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:43 +0330] "GET /'.$url.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:46 +0330] "GET /'.fm_img_link($filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:51 +0330] "GET /'.fm_url().'?fm_settings=true&fm_config_delete=true HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:53 +0330] "GET /'.fm_url(true).'?fm=true&edit='.basename($filename).'&path='.str_replace('/'.basename($filename),'/',$filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:21:58 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:00 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 260 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 200 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLmh0YWNjZXNzLnRhci5neg== HTTP/1.1" 200 405 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:18 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAudGFy HTTP/1.1" 200 1765 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC50YXI= HTTP/1.1" 200 24105 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 32745 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:30 +0330] "GET /ff1.php?fm=true&delete=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10498 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:32 +0330] "GET /ff1.php?fm=true&delete=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:34 +0330] "GET /ff1.php?fm=true&delete=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:36 +0330] "GET /ff1.php?fm=true&edit=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:41 +0330] "GET /ff1.php?fm=true&edit=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:43 +0330] "GET /ff1.php?fm=true&edit=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:44 +0330] "GET /ff1.php?fm=true&edit=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8523 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:46 +0330] "GET /ff1.php?fm=true&edit=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8637 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:39 +0330] "GET /ff1.php?fm=true&edit=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8579 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:50 +0330] "GET /ff1.php?fm=true&edit=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:51 +0330] "GET /ff1.php?fm=true&edit=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:53 +0330] "GET /ff1.php?fm=true&edit=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:57 +0330] "GET /ff1.php?fm=true&edit=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:58 +0330] "GET /ff1.php?fm=true&edit=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8450 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:02 +0330] "GET /ff1.php?fm=true&edit=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:05 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/. HTTP/1.1" 200 11678 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:09 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cagefs HTTP/1.1" 200 9486 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:10 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cl.selector HTTP/1.1" 200 9557 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:12 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.clwpos HTTP/1.1" 200 9376 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:14 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cpanel HTTP/1.1" 200 10259 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:16 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cphorde HTTP/1.1" 200 9605 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:24 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.spamassassin HTTP/1.1" 200 9385 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:33 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/mail HTTP/1.1" 200 11709 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:38 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10403 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:40 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/.. HTTP/1.1" 200 10399 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:41 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/ssl HTTP/1.1" 200 9767 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:43 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/tmp HTTP/1.1" 200 9602 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:47 +0330] "GET /ff1.php?fm=true&rename=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:05 +0330] "GET /ff1.php?fm=true&rename=.cagefs&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:48 +0330] "GET /ff1.php?fm=true&edit=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8507 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:22:55 +0330] "GET /ff1.php?fm=true&edit=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:00 +0330] "GET /ff1.php?fm=true&edit=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:03 +0330] "GET /ff1.php?fm=true&edit=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:07 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.. HTTP/1.1" 200 9338 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:19 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.htpasswds HTTP/1.1" 200 9128 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:21 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.koality HTTP/1.1" 200 9117 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:22 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.razor HTTP/1.1" 200 10001 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:26 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.trash HTTP/1.1" 200 9095 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:28 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/access-logs HTTP/1.1" 200 9561 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:29 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/logs HTTP/1.1" 200 9676 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:31 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/lscache HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:35 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_ftp HTTP/1.1" 200 9370 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:36 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html HTTP/1.1" 200 10405 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:23:45 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/www HTTP/1.1" 200 10405 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:01 +0330] "GET /ff1.php?fm=true&rename=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:03 +0330] "GET /ff1.php?fm=true&rename=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:07 +0330] "GET /ff1.php?fm=true&rename=.cl.selector&path=/home/mehradh2/ HTTP/1.1" 200 8420 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:08 +0330] "GET /ff1.php?fm=true&rename=.clwpos&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:10 +0330] "GET /ff1.php?fm=true&rename=.cpanel&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:12 +0330] "GET /ff1.php?fm=true&rename=.cphorde&path=/home/mehradh2/ HTTP/1.1" 200 8412 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:13 +0330] "GET /ff1.php?fm=true&rename=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:15 +0330] "GET /ff1.php?fm=true&rename=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:22 +0330] "GET /ff1.php?fm=true&rename=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:29 +0330] "GET /ff1.php?fm=true&rename=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:35 +0330] "GET /ff1.php?fm=true&rename=access-logs&path=/home/mehradh2/ HTTP/1.1" 200 8419 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:40 +0330] "GET /ff1.php?fm=true&rename=etc&path=/home/mehradh2/ HTTP/1.1" 200 8415 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:42 +0330] "GET /ff1.php?fm=true&rename=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:43 +0330] "GET /ff1.php?fm=true&rename=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:45 +0330] "GET /ff1.php?fm=true&rename=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:49 +0330] "GET /ff1.php?fm=true&rename=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8430 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:50 +0330] "GET /ff1.php?fm=true&rename=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:56 +0330] "GET /ff1.php?fm=true&rename=mail&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:57 +0330] "GET /ff1.php?fm=true&rename=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:59 +0330] "GET /ff1.php?fm=true&rename=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8420 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:01 +0330] "GET /ff1.php?fm=true&rename=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:10 +0330] "GET /ff1.php?fm=true&rights=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:12 +0330] "GET /ff1.php?fm=true&rights=.cagefs&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:16 +0330] "GET /ff1.php?fm=true&rights=.clwpos&path=/home/mehradh2/ HTTP/1.1" 200 8450 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:17 +0330] "GET /ff1.php?fm=true&rights=.cpanel&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:22 +0330] "GET /ff1.php?fm=true&rights=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:17 +0330] "GET /ff1.php?fm=true&rename=.htpasswds&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:19 +0330] "GET /ff1.php?fm=true&rename=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:21 +0330] "GET /ff1.php?fm=true&rename=.koality&path=/home/mehradh2/ HTTP/1.1" 200 8412 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:24 +0330] "GET /ff1.php?fm=true&rename=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:26 +0330] "GET /ff1.php?fm=true&rename=.razor&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:28 +0330] "GET /ff1.php?fm=true&rename=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:31 +0330] "GET /ff1.php?fm=true&rename=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:33 +0330] "GET /ff1.php?fm=true&rename=.trash&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:36 +0330] "GET /ff1.php?fm=true&rename=acme-challenge&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:38 +0330] "GET /ff1.php?fm=true&rename=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:47 +0330] "GET /ff1.php?fm=true&rename=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:52 +0330] "GET /ff1.php?fm=true&rename=logs&path=/home/mehradh2/ HTTP/1.1" 200 8415 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:24:54 +0330] "GET /ff1.php?fm=true&rename=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8408 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:03 +0330] "GET /ff1.php?fm=true&rename=tmp&path=/home/mehradh2/ HTTP/1.1" 200 8415 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:05 +0330] "GET /ff1.php?fm=true&rename=www&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:06 +0330] "GET /ff1.php?fm=true&rights=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:08 +0330] "GET /ff1.php?fm=true&rights=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:14 +0330] "GET /ff1.php?fm=true&rights=.cl.selector&path=/home/mehradh2/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:19 +0330] "GET /ff1.php?fm=true&rights=.cphorde&path=/home/mehradh2/ HTTP/1.1" 200 8444 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:21 +0330] "GET /ff1.php?fm=true&rights=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:24 +0330] "GET /ff1.php?fm=true&rights=.htpasswds&path=/home/mehradh2/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:27 +0330] "GET /ff1.php?fm=true&rights=.koality&path=/home/mehradh2/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:31 +0330] "GET /ff1.php?fm=true&rights=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:33 +0330] "GET /ff1.php?fm=true&rights=.razor&path=/home/mehradh2/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:36 +0330] "GET /ff1.php?fm=true&rights=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:38 +0330] "GET /ff1.php?fm=true&rights=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:40 +0330] "GET /ff1.php?fm=true&rights=.trash&path=/home/mehradh2/ HTTP/1.1" 200 8442 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:43 +0330] "GET /ff1.php?fm=true&rights=acme-challenge&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 8463 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:50 +0330] "GET /ff1.php?fm=true&rights=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:51 +0330] "GET /ff1.php?fm=true&rights=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8445 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:53 +0330] "GET /ff1.php?fm=true&rights=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:58 +0330] "GET /ff1.php?fm=true&rights=logs&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:00 +0330] "GET /ff1.php?fm=true&rights=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:05 +0330] "GET /ff1.php?fm=true&rights=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:07 +0330] "GET /ff1.php?fm=true&rights=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:14 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:21 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 10956 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:29 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 10952 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:33 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 11102 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:35 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 11239 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:37 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 11244 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:26 +0330] "GET /ff1.php?fm=true&rights=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:29 +0330] "GET /ff1.php?fm=true&rights=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:34 +0330] "GET /ff1.php?fm=true&rights=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8455 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:41 +0330] "GET /ff1.php?fm=true&rights=access-logs&path=/home/mehradh2/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:44 +0330] "GET /ff1.php?fm=true&rights=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8437 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:46 +0330] "GET /ff1.php?fm=true&rights=etc&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:48 +0330] "GET /ff1.php?fm=true&rights=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8442 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:55 +0330] "GET /ff1.php?fm=true&rights=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8441 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:25:56 +0330] "GET /ff1.php?fm=true&rights=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:02 +0330] "GET /ff1.php?fm=true&rights=mail&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:04 +0330] "GET /ff1.php?fm=true&rights=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:09 +0330] "GET /ff1.php?fm=true&rights=tmp&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:10 +0330] "GET /ff1.php?fm=true&rights=www&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:12 +0330] "GET /ff1.php?fm_settings=true&fm_config_delete=true HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:16 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/1.1" 200 10579 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:17 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 10706 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:19 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 10822 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:31 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 10956 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:39 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 11362 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:43 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 11621 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:47 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:27:29 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 11832 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:27:48 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 11835 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:28:55 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:40 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:26:45 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 11619 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:28:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:28:44 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 11892 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:29:38 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvdG1w HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:30:22 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 12172 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:30:53 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 12337 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:31:08 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 12568 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:31:36 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 12676 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:32 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 13018 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:36 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 13180 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:38 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 13340 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:42 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/1.1" 200 13493 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:44 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 13509 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:47 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 13587 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:49 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 13560 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:51 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 13595 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:53 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 13588 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:55 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 13602 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:04 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 13888 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:06 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 13979 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:08 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 13900 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:10 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 14043 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:38 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 14084 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:34:13 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 13936 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:04 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 12885 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:41 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:57 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 13751 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:32:59 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 13657 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:02 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 13821 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:40 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 14043 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:33:42 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 62.84.185.67 - - [28/Feb/2026:04:34:16 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 188.253.116.146 - - [28/Feb/2026:04:55:21 +0330] "GET /ff1.php HTTP/1.1" 200 15653 "http://www.openurls.com.cn/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 188.253.116.146 - - [28/Feb/2026:05:04:47 +0330] "GET /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9255 "http://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 188.253.116.146 - - [28/Feb/2026:05:04:51 +0330] "POST /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9379 "http://mehradhospital.ir/ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 188.253.116.146 - - [28/Feb/2026:05:04:52 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 15710 "http://mehradhospital.ir/ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 188.253.116.146 - - [28/Feb/2026:05:05:11 +0330] "POST /ff1.php?fm=true HTTP/1.1" 200 15723 "http://mehradhospital.ir/ff1.php?fm=true&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 188.253.116.146 - - [28/Feb/2026:05:05:22 +0330] "POST /ff1.php?fm=true HTTP/1.1" 200 15923 "http://mehradhospital.ir/ff1.php?fm=true" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 65.21.136.254 - - [28/Feb/2026:05:21:47 +0330] "GET /error_log HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux i686; rv:147.0) Gecko/20100101 Firefox/147.0" 20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /zwso.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /class19.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /class20.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /admin.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /randkeyword.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /fwe.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /ioxi-o.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /images/m.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /g.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /tx1.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /xv.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /x56.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /htaccess.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /readme.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /x50.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /fv.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /file.php? HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /lsd.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /as.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /wsd.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /gtc.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /atx.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /z60.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /m.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /themes.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /click.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /install.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /lv.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:58 +0330] "GET /simple.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:58 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /w.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /0x.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /222.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /wp-content/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /admin.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /classwithtostring.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /abcd.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /inputs.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /manager.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /item.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /plugins/Cache/footer.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /mail.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /sx.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /wp-admin/maint/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /1.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /byp.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /wp-trackback.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /.well-known/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /wp-admin/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /gmo.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /css/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /filemanager/dialog.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /index/function.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /uploads/autoload_classmap.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /ww1.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /about/function.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /admin/function.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:09 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /security.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-content/radio.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /.well-known/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-content/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /.well-known/log.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /class.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /bless5.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /lock360.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /ioxi-o1.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /juuuu.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /ha.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /gg.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /we2.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /04.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /333.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /520.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /ar.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /x.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /xx.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /gifclass4.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /2clas.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /ave.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /wrt.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /bibil.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /radio.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /files.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /file7.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /gifclass.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /nox.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /file48.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /info.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /class9.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /la.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /bless11.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /ccou.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /ton.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /file9.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /ac.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /new4.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /pop.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /az.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /xaz.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /up4.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /1aa.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /elp.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /wtz.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /galex.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /xb.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /ova.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /vx.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /rh.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /wp-includes/certificates/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /wp-content/uploads/gravity_forms/g/e/e/a/Casper.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /spip.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /scripts/wpup.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /wordpress/update/wpupex.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /ho/wpup.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /wp-admin/maint/ HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /wp/wp-content/plugins/classic-editor/js/geido.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /myy.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-content/halo.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-includes/Requests/library/upload.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 404 796 "-" "-" 20.104.82.189 - - [28/Feb/2026:05:25:24 +0330] "GET /dapa.php? HTTP/1.1" 404 796 "-" "-" 188.253.116.146 - - [28/Feb/2026:05:52:00 +0330] "GET /ff1.php HTTP/1.1" 200 15851 "http://www.openurls.com.cn/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 147.135.253.34 - - [28/Feb/2026:05:56:12 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:14 +0330] "GET /ff1.php?fm=true&edit=mehradh2.rcube.db&path=/home/mehradh2/etc/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:15 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc/. HTTP/1.1" 200 9571 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:17 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc/.. HTTP/1.1" 200 11617 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:18 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc/mehradhospital.ir HTTP/1.1" 200 10180 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:42 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:44 +0330] "GET /'%20.%20$url_inc%20.%20'&edit='%20.%20$file%20.%20'&path='%20.%20$path.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:46 +0330] "GET /'%20.%20$url_inc%20.%20'&rename='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:47 +0330] "GET /'%20.%20$url_inc%20.%20'&rights='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:49 +0330] "GET /'.$url.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:50 +0330] "GET /'.$url_inc.'&delete='.$destination.'&path='%20.%20$path.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:52 +0330] "GET /'.fm_img_link($filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:53 +0330] "GET /'.fm_site_url().' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:55 +0330] "GET /'.fm_url($full).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:56 +0330] "GET /'.fm_url().'?fm_settings=true&fm_config_delete=true HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:58 +0330] "GET /'.fm_url(true).'?fm=true&edit='.basename($filename).'&path='.str_replace('/'.basename($filename),'/',$filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:56:59 +0330] "GET /%3C?%3E HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:01 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 196 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:02 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 260 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 279 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:07 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 200 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:08 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 267 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:10 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 101 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLmh0YWNjZXNzLnRhci5neg== HTTP/1.1" 200 408 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:14 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLnRhcg== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:16 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9nLnRhci5neg== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:17 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 1737 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:19 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAudGFy HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC50YXI= HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:22 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC5waHAudGFyLmd6 HTTP/1.1" 200 24699 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 32743 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:25 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAudGFy HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:26 +0330] "GET /ff1.php?fm=true&delete=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 14710 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:29 +0330] "GET /ff1.php?fm=true&edit=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:30 +0330] "GET /ff1.php?fm=true&edit=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8557 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:32 +0330] "GET /ff1.php?fm=true&edit=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8579 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:33 +0330] "GET /ff1.php?fm=true&edit=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:35 +0330] "GET /ff1.php?fm=true&edit=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:36 +0330] "GET /ff1.php?fm=true&edit=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8518 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:37 +0330] "GET /ff1.php?fm=true&edit=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8635 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:39 +0330] "GET /ff1.php?fm=true&edit=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8517 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:40 +0330] "GET /ff1.php?fm=true&edit=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:42 +0330] "GET /ff1.php?fm=true&edit=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:43 +0330] "GET /ff1.php?fm=true&edit=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:45 +0330] "GET /ff1.php?fm=true&edit=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8457 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:46 +0330] "GET /ff1.php?fm=true&edit=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:48 +0330] "GET /ff1.php?fm=true&edit=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8455 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:49 +0330] "GET /ff1.php?fm=true&edit=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:50 +0330] "GET /ff1.php?fm=true&edit=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8461 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:52 +0330] "GET /ff1.php?fm=true&edit=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8457 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:53 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/ HTTP/1.1" 200 11706 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:55 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/. HTTP/1.1" 200 11618 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:57 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.. HTTP/1.1" 200 9389 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:58 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cagefs HTTP/1.1" 200 9499 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:57:59 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cl.selector HTTP/1.1" 200 9499 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:01 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.clwpos HTTP/1.1" 200 9372 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:02 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cpanel HTTP/1.1" 200 10195 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:04 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cphorde HTTP/1.1" 200 9645 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:05 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.htpasswds HTTP/1.1" 200 9118 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:07 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.koality HTTP/1.1" 200 9124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:08 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.razor HTTP/1.1" 200 9966 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:10 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.spamassassin HTTP/1.1" 200 9399 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:11 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.trash HTTP/1.1" 200 9101 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:12 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/access-logs HTTP/1.1" 200 9560 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:14 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc HTTP/1.1" 200 9575 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:15 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/logs HTTP/1.1" 200 9675 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:17 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/lscache HTTP/1.1" 200 9112 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:18 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/mail HTTP/1.1" 200 11704 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:20 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_ftp HTTP/1.1" 200 9367 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:21 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html HTTP/1.1" 200 14690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:23 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 14628 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:26 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 9449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:27 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/. HTTP/1.1" 200 9402 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:29 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/.. HTTP/1.1" 200 14690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:31 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/acme-challenge HTTP/1.1" 200 9124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:32 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/. HTTP/1.1" 200 9105 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:34 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/.. HTTP/1.1" 200 14694 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:36 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/ssl HTTP/1.1" 200 9770 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:38 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/tmp HTTP/1.1" 200 9598 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:39 +0330] "GET /ff1.php?fm=true&rename=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:41 +0330] "GET /ff1.php?fm=true&rename=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:42 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:44 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:45 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:47 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 14711 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:49 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 14711 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:51 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:52 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:54 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 14708 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:56 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:58:58 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:01 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 14710 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:03 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:06 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:08 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 14703 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:10 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:28 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 14705 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:30 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:32 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvdG1w HTTP/1.1" 200 14821 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:34 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:36 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:37 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:39 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:40 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.253.34 - - [28/Feb/2026:05:59:42 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" PK!láѦEEmehradhospital.ir-ssl_lognu€žÙ˜ 20.220.8.221 - - [27/Feb/2026:20:52:00 +0330] "GET /wk/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:00 +0330] "GET /f.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /css/autoload_classmap.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /cgi-bin/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /adminfuns.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /wp-admin/js/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /wp-content/uploads/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /classwithtostring.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /wp-includes/images/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /wp-content/themes/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-includes/IXR/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /images/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-content/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-file.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /as.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /wp-cron.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /.well-known/ HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /24.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /wp-includes/Text/lv.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /wp-admin/js/admiin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /about.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /class-t.api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /about.PHP HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /function/function.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /wp-content/edit.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /wp-includes/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /wp-admin/css/colors/about.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /index/function.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /ioxi-o.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /file.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /wp-content/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /plugins.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /themes.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /inputs.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /man.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /sf.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /depotcv.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:11 +0330] "GET /sidwsi.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:11 +0330] "GET /n.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:11 +0330] "GET /abcd.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [27/Feb/2026:21:32:45 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 54.39.136.101 - - [27/Feb/2026:21:35:11 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 51.89.129.3 - - [27/Feb/2026:21:35:14 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 103.177.124.25 - - [27/Feb/2026:23:08:14 +0330] "GET /ff1.php HTTP/2" 200 10039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 103.177.124.25 - - [27/Feb/2026:23:08:15 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 103.177.124.25 - - [27/Feb/2026:23:24:53 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.178.6.101 - - [27/Feb/2026:23:42:44 +0330] "GET /en/comments/feed/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.101 - - [27/Feb/2026:23:42:43 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.100 - - [27/Feb/2026:23:57:54 +0330] "GET /en/feed/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 91.92.242.178 - - [28/Feb/2026:00:09:13 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 91.122.53.173 - - [28/Feb/2026:00:39:08 +0330] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Python-urllib/3.11" 216.73.216.80 - - [28/Feb/2026:00:41:09 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:00:41:09 +0330] "GET / HTTP/2" 200 1227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 192.178.6.100 - - [28/Feb/2026:01:05:30 +0330] "GET /cgi-bin/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 198.244.226.133 - - [28/Feb/2026:01:53:49 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 216.73.216.80 - - [28/Feb/2026:02:09:35 +0330] "GET /include.php.php.tar.gz HTTP/2" 200 32680 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:36 +0330] "GET /include.php.tar HTTP/2" 200 46080 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:11:09 +0330] "GET /ff1.php HTTP/2" 200 10677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:13:04 +0330] "GET /ff1.php.php.tar.gz HTTP/2" 200 24590 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:13:04 +0330] "GET /ff1.php.tar HTTP/2" 200 80384 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:31 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:31 +0330] "GET /error_log.tar.gz HTTP/2" 200 4341 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:56 +0330] "GET /form.php.tar HTTP/2" 200 4096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:12:41 +0330] "GET /form.php.php.tar.gz HTTP/2" 200 1628 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 192.178.6.100 - - [28/Feb/2026:02:27:17 +0330] "GET /include.php HTTP/1.1" 200 3165 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; GoogleOther)" 216.73.216.80 - - [28/Feb/2026:03:47:00 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=include.php HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:00 +0330] "GET /ff1.php?edit=ff1.php.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 25573 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=include.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:01 +0330] "GET /ff1.php?edit=form.php.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 10105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:02 +0330] "GET /ff1.php?edit=ff1.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 25487 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:02 +0330] "GET /ff1.php?edit=form.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 10076 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2Fcgi-bin HTTP/2" 200 9100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=include.php.php.tar.gz HTTP/2" 200 8434 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=include.php.php.tar.gz HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:47 +0330] "GET /ff1.php?edit=error_log.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8446 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F. HTTP/2" 200 10758 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ff1.php.php.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ff1.php.php.tar.gz HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=form.php.php.tar.gz HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=form.php.php.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:41 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:41 +0330] "GET /ff1.php?edit=ff1.php.php.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:41 +0330] "GET /ff1.php?edit=form.php.php.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:42 +0330] "GET /ff1.php?edit=include.php.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 41058 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:42 +0330] "GET /ff1.php?edit=include.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 41098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:43 +0330] "GET /ff1.php?edit=include.php.php.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:43 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.. HTTP/2" 200 11602 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:44 +0330] "GET /ff1.php?fm_settings=true HTTP/2" 200 9254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:44 +0330] "GET /ff1.php?phpinfo=true HTTP/2" 200 21938 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:45 +0330] "GET /ff1.php?proxy=true HTTP/2" 200 6785 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=error_log.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:11 +0330] "GET /ff1.php?edit=.htaccess.htaccess.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8446 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known HTTP/2" 200 9385 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=cgi-bin HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=error_log HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=cgi-bin HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:14 +0330] "GET /ff1.php?edit=.htaccess.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8681 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=error_log HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:07 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg%3D%3D HTTP/2" 200 10751 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.htaccess.htaccess.tar.gz HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.htaccess.htaccess.tar.gz HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.htaccess.tar HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.htaccess HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.htaccess.tar HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=error_log.tar.gz HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.htaccess HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/2" 200 4858 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/2" 200 279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:33 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24%3D HTTP/2" 200 10749 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:34 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:34 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg%3D%3D HTTP/2" 200 10744 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.well-known HTTP/2" 200 8419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:35 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/2" 200 10851 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.well-known HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAudGFy HTTP/2" 200 1765 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA%3D HTTP/2" 200 32540 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA%3D%3D HTTP/2" 200 23942 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA%3D HTTP/2" 200 1655 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:05 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:06 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:06 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24%3D HTTP/2" 200 10719 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:07 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:18 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLmh0YWNjZXNzLnRhci5neg%3D%3D HTTP/2" 200 408 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:18 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAucGhwLnRhci5neg%3D%3D HTTP/2" 200 32784 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:19 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAucGhwLnRhci5neg%3D%3D HTTP/2" 200 1732 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:19 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9nLnRhci5neg%3D%3D HTTP/2" 200 5996 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC5waHAudGFyLmd6 HTTP/2" 200 24699 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLnRhcg%3D%3D HTTP/2" 200 372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:21 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC50YXI%3D HTTP/2" 200 24105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:21 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAudGFy HTTP/2" 200 32723 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=include.php.tar HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:50 +0330] "GET /ff1.php?edit=error_log&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 13090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:51 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=include.php.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:06 +0330] "GET /ff1.php?edit=.htaccess&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8603 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ff1.php.tar HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=form.php.tar HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ff1.php.tar HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=form.php.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ff1.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ff1.php HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=form.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=form.php HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 146.70.170.154 - - [28/Feb/2026:03:55:49 +0330] "GET / HTTP/2" 200 4676 "-" "Mozilla/5.0 (Linux; Android 4.4.2; XT1032 Build/KOT49H.M004) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.93 Mobile Safari/537.36" 103.177.124.25 - - [28/Feb/2026:05:13:22 +0330] "GET /ff1.php HTTP/2" 200 14204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 103.177.124.25 - - [28/Feb/2026:05:13:23 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 216.73.216.80 - - [28/Feb/2026:05:17:03 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:04 +0330] "GET /'%20.%20$url_inc%20.%20'&edit='%20.%20$file%20.%20'&path='%20.%20$path.%20' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:04 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:05 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.. HTTP/2" 200 9319 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:05 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRj HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:06 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbWFpbA%3D%3D HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:06 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:58 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbG9ncw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:59 +0330] "GET /ff1.php?fm_config_delete=true&fm_settings=true HTTP/2" 200 100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:58 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ%3D%3D HTTP/2" 200 14171 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:59 +0330] "GET /'.fm_site_url().' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/2" 200 14260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:00 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/2" 200 14280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:01 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/2" 200 14352 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:02 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvdG1w HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:02 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbWFpbA%3D%3D HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:04 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbG9ncw%3D%3D HTTP/2" 200 12027 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/2" 200 12107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc HTTP/2" 200 9509 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:52 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Faccess-logs HTTP/2" 200 9503 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:53 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.trash HTTP/2" 200 9098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:54 +0330] "GET /'.fm_img_link($filename).' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:55 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw%3D HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:06 +0330] "GET /%3C?=%24url_inc.%27&path=%27+.+%24path HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:07 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/2" 200 123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin HTTP/2" 200 9383 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:08 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs HTTP/2" 200 9538 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.htpasswds HTTP/2" 200 9124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Flscache HTTP/2" 200 9104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:11 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw%3D%3D HTTP/2" 200 14174 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor HTTP/2" 200 9934 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:13 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ%3D HTTP/2" 200 6560 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:12 +0330] "GET /ff1.php?delete=error_log.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 14064 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel HTTP/2" 200 10254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:14 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.bash_profile HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.bash_logout HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=ssl HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=public_html HTTP/2" 200 8447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.bash_logout HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.imunify_patch_id HTTP/2" 200 8420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.bashrc HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.bash_profile HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=tmp HTTP/2" 200 8405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.bashrc HTTP/2" 200 8411 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:15 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F. HTTP/2" 200 9386 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=access-logs HTTP/2" 200 8450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.koality HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=logs HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=ssl HTTP/2" 200 8405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cl.selector HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.spamassassinboxenable HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw%3D%3D HTTP/2" 200 273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?edit=.lastlogin&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8620 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=mail HTTP/2" 200 8436 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=public_html HTTP/2" 200 8408 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ%3D%3D HTTP/2" 200 258 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=public_ftp HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=etc HTTP/2" 200 8406 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2Facme-challenge HTTP/2" 200 9166 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.spamassassin HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=lscache HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.spamassassinenable HTTP/2" 200 8412 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:16 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2Fcgi-bin%2F.. HTTP/2" 200 9692 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:44 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F.. HTTP/2" 200 14135 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:44 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M%3D HTTP/2" 200 14229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:36 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:39 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU%3D HTTP/2" 200 11530 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:02 +0330] "GET /ff1.php?edit=.spamassassinenable&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8435 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:02 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:02 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=tmp HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.imunify_patch_id HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ%3D HTTP/2" 200 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:03 +0330] "GET /ff1.php?edit=.spamassassinboxenable&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /'.fm_url().'?fm_config_delete=true&fm_settings=true HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp HTTP/2" 200 9359 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:05 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos HTTP/2" 200 9362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fwww HTTP/2" 200 14093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:05 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA%3D%3D HTTP/2" 200 14159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=access-logs HTTP/2" 200 8407 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=logs HTTP/2" 200 8409 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.htpasswds HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cagefs HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.koality HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.razor HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /'.fm_url(true).'?edit=%27.basename%28%24filename%29.%27&fm=true&path=%27.str_replace%28%27%2F%27.basename%28%24filename%29%2C%27%2F%27%2C%24filename%29.%27 HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ%3D%3D HTTP/2" 200 101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ%3D%3D HTTP/2" 200 101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F&rename=acme-challenge HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.myimunify_id HTTP/2" 200 8413 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.clwpos HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:13 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=public_ftp HTTP/2" 200 8410 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.spamassassin HTTP/2" 200 8410 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=lscache HTTP/2" 200 8401 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F&rights=acme-challenge HTTP/2" 200 8459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.htpasswds HTTP/2" 200 8410 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cagefs HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.myimunify_id HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.razor HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cphorde HTTP/2" 200 8403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=www HTTP/2" 200 8405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.clwpos HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.trash HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA%3D%3D HTTP/2" 200 197 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector HTTP/2" 200 9495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.koality HTTP/2" 200 9116 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl HTTP/2" 200 9704 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?edit=.bashrc&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8569 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?edit=.imunify_patch_id&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8518 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /'%20.%20$url_inc%20.%20'&rights='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /'%20.%20$url_inc%20.%20'&rename='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk%3D HTTP/2" 200 14273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html HTTP/2" 200 14277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA%3D%3D HTTP/2" 200 14285 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U%3D HTTP/2" 200 14260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U%3D HTTP/2" 200 14276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=mail HTTP/2" 200 8413 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cphorde HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cl.selector HTTP/2" 200 8412 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=www HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.spamassassinboxenable HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cpanel HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?edit=.myimunify_id&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.trash HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.spamassassinenable HTTP/2" 200 8419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=etc HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cpanel HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg%3D%3D HTTP/2" 200 14361 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 188.253.116.146 - - [28/Feb/2026:05:43:19 +0330] "GET /123.php HTTP/2" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.15.100 - - [28/Feb/2026:05:52:07 +0330] "GET /.well-known/traffic-advice HTTP/1.1" 404 796 "-" "Chrome Privacy Preserving Prefetch Proxy" 188.253.116.146 - - [28/Feb/2026:05:43:20 +0330] "GET /jp2023 HTTP/2" 404 796 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.253.116.146 - - [28/Feb/2026:05:43:22 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/jp2023" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.253.116.146 - - [28/Feb/2026:05:44:29 +0330] "GET /?jp2023 HTTP/2" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.253.116.146 - - [28/Feb/2026:05:44:31 +0330] "GET /?jp2023cww HTTP/2" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" PK!˜Âé}ÑþÑþmehradhospital.irnu€žÙ˜ PK!láѦEEÿmehradhospital.ir-ssl_lognu€žÙ˜ PKª