ÿØÿà JFIF    ÿÛ „  ( %!1!%*+...983,7(-.- usr/local/apache/domlogs/mehradh2/mehradhospital.ir-ssl_log000064000000550003151504567740020043 0ustar0020.220.8.221 - - [27/Feb/2026:20:52:00 +0330] "GET /wk/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:00 +0330] "GET /f.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /css/autoload_classmap.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:01 +0330] "GET /cgi-bin/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /adminfuns.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /wp-admin/js/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:02 +0330] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /wp-content/uploads/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /classwithtostring.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /wp-includes/images/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:03 +0330] "GET /wp-content/themes/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-includes/IXR/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /images/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-content/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:04 +0330] "GET /wp-file.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /as.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /wp-cron.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:05 +0330] "GET /.well-known/ HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /24.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /wp-includes/Text/lv.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /wp-admin/js/admiin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /about.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:06 +0330] "GET /class-t.api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /about.PHP HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /function/function.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /wp-content/edit.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /wp-includes/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:07 +0330] "GET /wp-admin/css/colors/about.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /index/function.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /ioxi-o.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /file.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /wp-content/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:08 +0330] "GET /wp-includes/css/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /plugins.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /wp-content/uploads/2025/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /themes.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:09 +0330] "GET /inputs.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /man.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /wp-content/themes/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /sf.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:10 +0330] "GET /depotcv.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:11 +0330] "GET /sidwsi.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:11 +0330] "GET /n.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:20:52:11 +0330] "GET /abcd.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.246.253.24 - - [27/Feb/2026:21:32:45 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36" 54.39.136.101 - - [27/Feb/2026:21:35:11 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 51.89.129.3 - - [27/Feb/2026:21:35:14 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 103.177.124.25 - - [27/Feb/2026:23:08:14 +0330] "GET /ff1.php HTTP/2" 200 10039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 103.177.124.25 - - [27/Feb/2026:23:08:15 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 103.177.124.25 - - [27/Feb/2026:23:24:53 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.178.6.101 - - [27/Feb/2026:23:42:44 +0330] "GET /en/comments/feed/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.101 - - [27/Feb/2026:23:42:43 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.6.100 - - [27/Feb/2026:23:57:54 +0330] "GET /en/feed/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 91.92.242.178 - - [28/Feb/2026:00:09:13 +0330] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 91.122.53.173 - - [28/Feb/2026:00:39:08 +0330] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Python-urllib/3.11" 216.73.216.80 - - [28/Feb/2026:00:41:09 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:00:41:09 +0330] "GET / HTTP/2" 200 1227 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 192.178.6.100 - - [28/Feb/2026:01:05:30 +0330] "GET /cgi-bin/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 198.244.226.133 - - [28/Feb/2026:01:53:49 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 216.73.216.80 - - [28/Feb/2026:02:09:35 +0330] "GET /include.php.php.tar.gz HTTP/2" 200 32680 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:36 +0330] "GET /include.php.tar HTTP/2" 200 46080 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:11:09 +0330] "GET /ff1.php HTTP/2" 200 10677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:13:04 +0330] "GET /ff1.php.php.tar.gz HTTP/2" 200 24590 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:13:04 +0330] "GET /ff1.php.tar HTTP/2" 200 80384 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:31 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:31 +0330] "GET /error_log.tar.gz HTTP/2" 200 4341 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:09:56 +0330] "GET /form.php.tar HTTP/2" 200 4096 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:02:12:41 +0330] "GET /form.php.php.tar.gz HTTP/2" 200 1628 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 192.178.6.100 - - [28/Feb/2026:02:27:17 +0330] "GET /include.php HTTP/1.1" 200 3165 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; GoogleOther)" 216.73.216.80 - - [28/Feb/2026:03:47:00 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=include.php HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:00 +0330] "GET /ff1.php?edit=ff1.php.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 25573 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=include.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:01 +0330] "GET /ff1.php?edit=form.php.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 10105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:02 +0330] "GET /ff1.php?edit=ff1.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 25487 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:02 +0330] "GET /ff1.php?edit=form.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 10076 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2Fcgi-bin HTTP/2" 200 9100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=include.php.php.tar.gz HTTP/2" 200 8434 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=include.php.php.tar.gz HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:47 +0330] "GET /ff1.php?edit=error_log.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8446 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F. HTTP/2" 200 10758 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ff1.php.php.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ff1.php.php.tar.gz HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=form.php.php.tar.gz HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=form.php.php.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:41 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:41 +0330] "GET /ff1.php?edit=ff1.php.php.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:41 +0330] "GET /ff1.php?edit=form.php.php.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:42 +0330] "GET /ff1.php?edit=include.php.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 41058 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:42 +0330] "GET /ff1.php?edit=include.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 41098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:43 +0330] "GET /ff1.php?edit=include.php.php.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:43 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.. HTTP/2" 200 11602 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:44 +0330] "GET /ff1.php?fm_settings=true HTTP/2" 200 9254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:44 +0330] "GET /ff1.php?phpinfo=true HTTP/2" 200 21938 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:46:45 +0330] "GET /ff1.php?proxy=true HTTP/2" 200 6785 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=error_log.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:11 +0330] "GET /ff1.php?edit=.htaccess.htaccess.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8446 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known HTTP/2" 200 9385 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=cgi-bin HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=error_log HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=cgi-bin HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:14 +0330] "GET /ff1.php?edit=.htaccess.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8681 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=error_log HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:07 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg%3D%3D HTTP/2" 200 10751 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.htaccess.htaccess.tar.gz HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.htaccess.htaccess.tar.gz HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.htaccess.tar HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.htaccess HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.htaccess.tar HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=error_log.tar.gz HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.htaccess HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/2" 200 4858 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/2" 200 279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:33 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24%3D HTTP/2" 200 10749 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:34 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:34 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg%3D%3D HTTP/2" 200 10744 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.well-known HTTP/2" 200 8419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:35 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/2" 200 10851 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:49:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.well-known HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAudGFy HTTP/2" 200 1765 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA%3D HTTP/2" 200 32540 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA%3D%3D HTTP/2" 200 23942 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA%3D HTTP/2" 200 1655 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:05 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:06 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:06 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24%3D HTTP/2" 200 10719 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:07 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:18 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLmh0YWNjZXNzLnRhci5neg%3D%3D HTTP/2" 200 408 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:18 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAucGhwLnRhci5neg%3D%3D HTTP/2" 200 32784 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:19 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAucGhwLnRhci5neg%3D%3D HTTP/2" 200 1732 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:19 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9nLnRhci5neg%3D%3D HTTP/2" 200 5996 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC5waHAudGFyLmd6 HTTP/2" 200 24699 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLnRhcg%3D%3D HTTP/2" 200 372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:21 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC50YXI%3D HTTP/2" 200 24105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:50:21 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAudGFy HTTP/2" 200 32723 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=include.php.tar HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:50 +0330] "GET /ff1.php?edit=error_log&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 13090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:47:51 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=include.php.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:06 +0330] "GET /ff1.php?edit=.htaccess&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8603 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ff1.php.tar HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=form.php.tar HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ff1.php.tar HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=form.php.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ff1.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:08 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ff1.php HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=form.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:03:48:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=form.php HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 146.70.170.154 - - [28/Feb/2026:03:55:49 +0330] "GET / HTTP/2" 200 4676 "-" "Mozilla/5.0 (Linux; Android 4.4.2; XT1032 Build/KOT49H.M004) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.93 Mobile Safari/537.36" 103.177.124.25 - - [28/Feb/2026:05:13:22 +0330] "GET /ff1.php HTTP/2" 200 14204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 103.177.124.25 - - [28/Feb/2026:05:13:23 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 216.73.216.80 - - [28/Feb/2026:05:17:03 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:04 +0330] "GET /'%20.%20$url_inc%20.%20'&edit='%20.%20$file%20.%20'&path='%20.%20$path.%20' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:04 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:05 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.. HTTP/2" 200 9319 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:05 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRj HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:06 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbWFpbA%3D%3D HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:06 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:58 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbG9ncw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:59 +0330] "GET /ff1.php?fm_config_delete=true&fm_settings=true HTTP/2" 200 100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:58 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ%3D%3D HTTP/2" 200 14171 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:59 +0330] "GET /'.fm_site_url().' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/2" 200 14260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:00 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/2" 200 14280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:01 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/2" 200 14352 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:02 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvdG1w HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:02 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbWFpbA%3D%3D HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:04 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbG9ncw%3D%3D HTTP/2" 200 12027 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/2" 200 12107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc HTTP/2" 200 9509 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:52 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Faccess-logs HTTP/2" 200 9503 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:53 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.trash HTTP/2" 200 9098 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:54 +0330] "GET /'.fm_img_link($filename).' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:55 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw%3D HTTP/2" 200 4554 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:06 +0330] "GET /%3C?=%24url_inc.%27&path=%27+.+%24path HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:07 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/2" 200 123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:07 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin HTTP/2" 200 9383 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:08 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs HTTP/2" 200 9538 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:10 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.htpasswds HTTP/2" 200 9124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Flscache HTTP/2" 200 9104 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:11 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw%3D%3D HTTP/2" 200 14174 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor HTTP/2" 200 9934 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:13 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ%3D HTTP/2" 200 6560 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:12 +0330] "GET /ff1.php?delete=error_log.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 14064 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel HTTP/2" 200 10254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:19:14 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.bash_profile HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.bash_logout HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=ssl HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=public_html HTTP/2" 200 8447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.bash_logout HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.imunify_patch_id HTTP/2" 200 8420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.bashrc HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.bash_profile HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=tmp HTTP/2" 200 8405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.bashrc HTTP/2" 200 8411 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:15 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F. HTTP/2" 200 9386 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=access-logs HTTP/2" 200 8450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.koality HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=logs HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=ssl HTTP/2" 200 8405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cl.selector HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.spamassassinboxenable HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:49 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw%3D%3D HTTP/2" 200 273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?edit=.lastlogin&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8620 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=mail HTTP/2" 200 8436 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=public_html HTTP/2" 200 8408 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ%3D%3D HTTP/2" 200 258 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:50 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=public_ftp HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=etc HTTP/2" 200 8406 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2Facme-challenge HTTP/2" 200 9166 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.spamassassin HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=lscache HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.spamassassinenable HTTP/2" 200 8412 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:16 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2Fcgi-bin%2F.. HTTP/2" 200 9692 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:44 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F.. HTTP/2" 200 14135 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:17:44 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M%3D HTTP/2" 200 14229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:36 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:18:39 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU%3D HTTP/2" 200 11530 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:02 +0330] "GET /ff1.php?edit=.spamassassinenable&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8435 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:02 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:02 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=tmp HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.imunify_patch_id HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ%3D HTTP/2" 200 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:03 +0330] "GET /ff1.php?edit=.spamassassinboxenable&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /'.fm_url().'?fm_config_delete=true&fm_settings=true HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp HTTP/2" 200 9359 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:05 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos HTTP/2" 200 9362 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fwww HTTP/2" 200 14093 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:20:05 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA%3D%3D HTTP/2" 200 14159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=access-logs HTTP/2" 200 8407 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=logs HTTP/2" 200 8409 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.htpasswds HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cagefs HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.koality HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.razor HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /'.fm_url(true).'?edit=%27.basename%28%24filename%29.%27&fm=true&path=%27.str_replace%28%27%2F%27.basename%28%24filename%29%2C%27%2F%27%2C%24filename%29.%27 HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ%3D%3D HTTP/2" 200 101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ%3D%3D HTTP/2" 200 101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F&rename=acme-challenge HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.myimunify_id HTTP/2" 200 8413 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.clwpos HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:13 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=public_ftp HTTP/2" 200 8410 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.spamassassin HTTP/2" 200 8410 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=lscache HTTP/2" 200 8401 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F&rights=acme-challenge HTTP/2" 200 8459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.htpasswds HTTP/2" 200 8410 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cagefs HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:46 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.myimunify_id HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.razor HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cphorde HTTP/2" 200 8403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=www HTTP/2" 200 8405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.clwpos HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.trash HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:21:47 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA%3D%3D HTTP/2" 200 197 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector HTTP/2" 200 9495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.koality HTTP/2" 200 9116 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl HTTP/2" 200 9704 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?edit=.bashrc&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8569 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?edit=.imunify_patch_id&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8518 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /'%20.%20$url_inc%20.%20'&rights='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /'%20.%20$url_inc%20.%20'&rename='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk%3D HTTP/2" 200 14273 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:18 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html HTTP/2" 200 14277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:19 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA%3D%3D HTTP/2" 200 14285 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U%3D HTTP/2" 200 14260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:22:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U%3D HTTP/2" 200 14276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=mail HTTP/2" 200 8413 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cphorde HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cl.selector HTTP/2" 200 8412 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=www HTTP/2" 200 8439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.spamassassinboxenable HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rename=.cpanel HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?edit=.myimunify_id&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.trash HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.spamassassinenable HTTP/2" 200 8419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=etc HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:12 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F&rights=.cpanel HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:05:23:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg%3D%3D HTTP/2" 200 14361 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 188.253.116.146 - - [28/Feb/2026:05:43:19 +0330] "GET /123.php HTTP/2" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.15.100 - - [28/Feb/2026:05:52:07 +0330] "GET /.well-known/traffic-advice HTTP/1.1" 404 796 "-" "Chrome Privacy Preserving Prefetch Proxy" 188.253.116.146 - - [28/Feb/2026:05:43:20 +0330] "GET /jp2023 HTTP/2" 404 796 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.253.116.146 - - [28/Feb/2026:05:43:22 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/jp2023" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.253.116.146 - - [28/Feb/2026:05:44:29 +0330] "GET /?jp2023 HTTP/2" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.253.116.146 - - [28/Feb/2026:05:44:31 +0330] "GET /?jp2023cww HTTP/2" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 216.73.216.80 - - [28/Feb/2026:06:29:14 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:29:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2Fcgi-bin%2F.. HTTP/2" 200 14816 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 154.211.22.213 - - [28/Feb/2026:06:30:58 +0330] "GET /ff1.php HTTP/2" 200 14816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 154.211.22.213 - - [28/Feb/2026:06:31:20 +0330] "GET /favicon.ico HTTP/2" 404 796 "https://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 216.73.216.80 - - [28/Feb/2026:06:33:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2 HTTP/2" 200 11666 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:35:17 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2F&rights=mehradh2 HTTP/2" 200 8435 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:35:17 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDI%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:37:10 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:37:09 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk%3D HTTP/2" 200 14770 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:29:44 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2F.. HTTP/2" 200 10298 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:29:44 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/2" 200 14889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:31:31 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:31:37 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvdG1w HTTP/2" 200 14928 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:32:34 +0330] "GET /'.$url_inc.'&delete='.$destination.'&path='%20.%20$path.' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:32:40 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvZXRj HTTP/2" 200 14923 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:34:28 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDI%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:34:50 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2F&rename=mehradh2 HTTP/2" 200 8402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:36:14 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2F. HTTP/2" 200 9372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:36:14 +0330] "GET /'.$url.' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 92.222.108.105 - - [28/Feb/2026:06:36:36 +0330] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 198.244.183.101 - - [28/Feb/2026:06:36:39 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 216.73.216.80 - - [28/Feb/2026:06:37:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Ftmp HTTP/2" 200 9595 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:37:27 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw%3D%3D HTTP/2" 200 14891 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:38:28 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:38:28 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA%3D%3D HTTP/2" 200 14911 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:39:44 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F. HTTP/2" 200 11598 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:39:44 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 14815 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:41:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Flogs HTTP/2" 200 9665 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:41:13 +0330] "GET /ff1.php?edit=.bash_logout&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:41:22 +0330] "GET /'.fm_url($full).' HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.imunify_patch_id.imunify_patch_id.tar.gz HTTP/2" 200 8443 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:33 +0330] "GET /ff1.php?edit=ssl.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 24155 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:33 +0330] "GET /ff1.php?edit=mail.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:34 +0330] "GET /ff1.php?edit=.cl.selector.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8445 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:34 +0330] "GET /ff1.php?edit=logs.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:35 +0330] "GET /ff1.php?delete=.cl.selector.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 14714 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F. HTTP/2" 200 9565 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:36 +0330] "GET /ff1.php?edit=ssl.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.trash%2F. HTTP/2" 200 9088 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:38:13 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2Fcgi-bin%2F. HTTP/2" 200 9100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:38:13 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 103.177.124.25 - - [28/Feb/2026:06:38:18 +0330] "GET /form.php HTTP/2" 200 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 216.73.216.80 - - [28/Feb/2026:06:38:32 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ%3D%3D HTTP/2" 200 14848 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:38:32 +0330] "GET /ff1.php?%27.%24get.%27=%27.base64_encode%28%24link%29.%27 HTTP/2" 200 14703 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:39:25 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU%3D HTTP/2" 200 14941 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:39:25 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw%3D%3D HTTP/2" 200 14849 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:40:25 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cphorde HTTP/2" 200 9639 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:40:25 +0330] "GET /ff1.php?edit=.bash_profile&fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 8546 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 192.187.126.242 - - [28/Feb/2026:06:42:07 +0330] "GET /jp2023 HTTP/1.1" 404 796 "-" "-" 217.160.141.159 - - [28/Feb/2026:06:42:04 +0330] "GET / HTTP/2" 500 0 "-" "Mozilla/5.0 (Linux; Android 5.0.1; SM-N910R4 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.76 Mobile Safari/537.36" 216.73.216.80 - - [28/Feb/2026:06:42:23 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fmail HTTP/2" 200 11670 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.imunify_patch_id.tar HTTP/2" 200 8434 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?edit=.spamassassinenable.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8512 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?edit=.razor.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?edit=access-logs.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 23022 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.bash_profile.bash_profile.tar.gz HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?edit=.spamassassinboxenable.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8509 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?delete=.razor.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 14723 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:41 +0330] "GET /ff1.php?edit=etc.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=123.php HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.bash_logout.bash_logout.tar.gz HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=index.php HTTP/2" 200 8413 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?edit=mail.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.imunify_patch_id.imunify_patch_id.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.bashrc.bashrc.tar.gz HTTP/2" 200 8419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:42 +0330] "GET /ff1.php?edit=logs.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=123.php HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=index.php HTTP/2" 200 8420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?edit=.cl.selector.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8911 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?edit=.cphorde.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.bashrc.bashrc.tar.gz HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:36 +0330] "GET /ff1.php?edit=.bash_profile.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8642 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:37 +0330] "GET /ff1.php?edit=.bash_logout.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8525 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:37 +0330] "GET /ff1.php?edit=.bashrc.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8652 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:37 +0330] "GET /ff1.php?edit=.bash_profile.bash_profile.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:38 +0330] "GET /ff1.php?edit=.imunify_patch_id.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8596 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:38 +0330] "GET /ff1.php?edit=.bash_logout.bash_logout.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8449 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:38 +0330] "GET /ff1.php?edit=index.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 10358 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:38 +0330] "GET /ff1.php?edit=123.php&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8475 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:39 +0330] "GET /ff1.php?edit=.bashrc.bashrc.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:38 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGhvc3BpdGFsLmly HTTP/2" 200 14891 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:39 +0330] "GET /ff1.php?edit=.imunify_patch_id.imunify_patch_id.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:39 +0330] "GET /ff1.php?fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F. HTTP/2" 200 9558 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.trash%2F.. HTTP/2" 200 11608 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F.. HTTP/2" 200 11665 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:40 +0330] "GET /ff1.php?fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F.. HTTP/2" 200 7449 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=logs.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=.spamassassin.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 9471 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=mail.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=.clwpos.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=www.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.bash_logout.tar HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=.cl.selector.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ssl.zip HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.bash_profile.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=.cpanel.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 45652 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=.spamassassinboxenable.spamassassinboxenable.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?edit=.razor.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 9280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.bashrc.tar HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?edit=.spamassassin.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.imunify_patch_id.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGhvc3BpdGFsLmly HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?edit=access-logs.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8445 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:43 +0330] "GET /ff1.php?edit=public_html.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8445 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:42:44 +0330] "GET /ff1.php?edit=etc.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=www.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.razor.tar HTTP/2" 200 8431 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=logs.tar HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cpanel.zip HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassinenable.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?edit=.spamassassin.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8451 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=etc.zip HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=access-logs.zip HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cphorde.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassinboxenable.spamassassinboxenable.tar.gz HTTP/2" 200 8440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:21 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=mail.tar HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.razor.zip HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cpanel.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cl.selector.tar HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=logs.zip HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassinboxenable.tar HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ssl.tar.gz HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?edit=.myimunify_id.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8596 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=public_html.tar.gz HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cpanel.zip HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cphorde.zip HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=etc.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:22 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=access-logs.tar HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:23 +0330] "GET /ff1.php?edit=.razor.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.clwpos.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.razor.zip HTTP/2" 200 8420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cphorde.tar HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.razor.tar HTTP/2" 200 8420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=www.tar HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=etc.tar.gz HTTP/2" 200 8431 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=access-logs.tar.gz HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cpanel.tar.gz HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=logs.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.clwpos.zip HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassinboxenable.spamassassinboxenable.tar.gz HTTP/2" 200 8435 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ssl.tar.gz HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cphorde.zip HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassinenable.spamassassinenable.tar.gz HTTP/2" 200 8435 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassin.tar HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?edit=.clwpos.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8443 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cpanel.tar HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=mail.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cl.selector.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=etc.tar HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=access-logs.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:37 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassin.zip HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:38 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=public_html.tar.gz HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:44:36 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvbWFpbC56aXA%3D HTTP/2" 200 16026109 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.razor.tar.gz HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassin.tar.gz HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.myimunify_id.tar HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cphorde.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?edit=.lastlogin.lastlogin.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.clwpos.tar.gz HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?edit=mehradhospital.ir-ssl_log&fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F HTTP/2" 200 15159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?edit=mehradhospital.ir&fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F HTTP/2" 200 19494 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=etc.tar.gz HTTP/2" 200 8420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.clwpos.tar HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=access-logs.tar.gz HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=logs.tar.gz HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.clwpos.zip HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassin.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cpanel.tar.gz HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassinenable.spamassassinenable.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.myimunify_id.tar HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassin.tar HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.razor.tar.gz HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cl.selector.tar.gz HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=mail.tar.gz HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.spamassassin.zip HTTP/2" 200 8422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cphorde.tar.gz HTTP/2" 200 8431 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.bash_profile.tar HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.bash_logout.tar HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.bashrc.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.bash_logout.bash_logout.tar.gz HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?edit=ssl.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?edit=public_html.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8449 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?edit=.cphorde.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?edit=.cpanel.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:43:36 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.bash_profile.bash_profile.tar.gz HTTP/2" 200 8431 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:32 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvYWNjZXNzLWxvZ3MudGFy HTTP/2" 200 14117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.myimunify_id.myimunify_id.tar.gz HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:32 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvYWNjZXNzLWxvZ3Muemlw HTTP/2" 200 14530 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:32 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvbG9ncy50YXI%3D HTTP/2" 200 116253 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvc3NsLnRhcg%3D%3D HTTP/2" 200 15564 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXRjLnRhcg%3D%3D HTTP/2" 200 47564 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F&rename=mehradhospital.ir HTTP/2" 200 8411 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F&rename=mehradhospital.ir-ssl_log HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F&rights=mehradh2.rcube.db HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5kZXgucGhw HTTP/2" 200 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:32 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvMTIzLnBocA%3D%3D HTTP/2" 200 14820 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2Fmehradhospital.ir HTTP/2" 200 10173 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvbG9ncy56aXA%3D HTTP/2" 200 116788 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.myimunify_id.myimunify_id.tar.gz HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvc3NsLnppcA%3D%3D HTTP/2" 200 15827 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXRjLnppcA%3D%3D HTTP/2" 200 48174 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F&rights=mehradhospital.ir HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?fm=true&path=%2Fusr%2Flocal%2Fapache%2Fdomlogs%2Fmehradh2%2F&rights=mehradhospital.ir-ssl_log HTTP/2" 200 8431 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?edit=.myimunify_id.myimunify_id.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?edit=mehradh2.rcube.db&fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.clwpos.tar.gz HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:27 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvbWFpbC50YXI%3D HTTP/2" 200 16037433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:03 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F&rename=mehradhospital.ir HTTP/2" 200 8404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGgyLnJjdWJlLmRi HTTP/2" 200 6331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNwaG9yZGUudGFyLmd6 HTTP/2" 200 26414 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnJhem9yLnRhcg%3D%3D HTTP/2" 200 944 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNsLnNlbGVjdG9yLnRhcg%3D%3D HTTP/2" 200 573 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:03 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNwYW5lbC50YXI%3D HTTP/2" 200 30686 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNwaG9yZGUudGFy HTTP/2" 200 24545 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmJhc2hfcHJvZmlsZS50YXI%3D HTTP/2" 200 332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNsd3Bvcy50YXI%3D HTTP/2" 200 170 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNwYW5lbC56aXA%3D HTTP/2" 200 30570 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNsLnNlbGVjdG9yLnppcA%3D%3D HTTP/2" 200 100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnJhem9yLnppcA%3D%3D HTTP/2" 200 100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGgyLnJjdWJlLmRi HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNsd3Bvcy56aXA%3D HTTP/2" 200 173 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmltdW5pZnlfcGF0Y2hfaWQudGFy HTTP/2" 200 289 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:34 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5kZXgucGhw HTTP/2" 200 15012 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvbWFpbC50YXIuZ3o%3D HTTP/2" 200 16138625 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:45:33 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvd3d3LnRhcg%3D%3D HTTP/2" 200 49462737 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmltdW5pZnlfcGF0Y2hfaWQuaW11bmlmeV9wYXRjaF9pZC50YXIuZ3o%3D HTTP/2" 200 308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnNwYW1hc3Nhc3NpbmVuYWJsZS5zcGFtYXNzYXNzaW5lbmFibGUudGFyLmd6 HTTP/2" 200 210 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZS50YXI%3D HTTP/2" 200 192 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmJhc2hfbG9nb3V0LmJhc2hfbG9nb3V0LnRhci5neg%3D%3D HTTP/2" 200 222 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnNwYW1hc3Nhc3Npbi50YXIuZ3o%3D HTTP/2" 200 1157 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:11 +0330] "GET /ff1.php?download=L3Vzci9sb2NhbC9hcGFjaGUvZG9tbG9ncy9tZWhyYWRoMi9tZWhyYWRob3NwaXRhbC5pci1zc2xfbG9n HTTP/2" 200 7599 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnNwYW1hc3Nhc3NpbmVuYWJsZS50YXI%3D HTTP/2" 200 187 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnNwYW1hc3Nhc3Npbi50YXI%3D HTTP/2" 200 1158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnNwYW1hc3Nhc3Npbi56aXA%3D HTTP/2" 200 1230 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLm15aW11bmlmeV9pZC5teWltdW5pZnlfaWQudGFyLmd6 HTTP/2" 200 304 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmJhc2hyYy5iYXNocmMudGFyLmd6 HTTP/2" 200 383 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L3Vzci9sb2NhbC9hcGFjaGUvZG9tbG9ncy9tZWhyYWRoMi9tZWhyYWRob3NwaXRhbC5pcg%3D%3D HTTP/2" 200 10660 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNwYW5lbC50YXIuZ3o%3D HTTP/2" 200 32190 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLnJhem9yLnRhci5neg%3D%3D HTTP/2" 200 989 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?gzfile=L3Vzci9sb2NhbC9hcGFjaGUvZG9tbG9ncy9tZWhyYWRoMi9tZWhyYWRob3NwaXRhbC5pci1zc2xfbG9n HTTP/2" 200 15091 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNsd3Bvcy50YXIuZ3o%3D HTTP/2" 200 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:12 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNsLnNlbGVjdG9yLnRhci5neg%3D%3D HTTP/2" 200 616 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmJhc2hfcHJvZmlsZS5iYXNoX3Byb2ZpbGUudGFyLmd6 HTTP/2" 200 359 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmNwaG9yZGUuemlw HTTP/2" 200 25031 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLm15aW11bmlmeV9pZC50YXI%3D HTTP/2" 200 276 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmJhc2hfbG9nb3V0LnRhcg%3D%3D HTTP/2" 200 203 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmJhc2hyYy50YXI%3D HTTP/2" 200 359 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:13 +0330] "GET /ff1.php?gzfile=L3Vzci9sb2NhbC9hcGFjaGUvZG9tbG9ncy9tZWhyYWRoMi9tZWhyYWRob3NwaXRhbC5pcg%3D%3D HTTP/2" 200 15165 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=mail.tar HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassinenable.tar HTTP/2" 200 8435 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=mail.zip HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=logs.tar HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=.cl.selector.zip HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.spamassassinboxenable.tar HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?edit=.cpanel.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cl.selector.tar HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ssl.tar HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?edit=.cphorde.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8446 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=access-logs.zip HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=etc.zip HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?edit=.lastlogin.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8707 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=logs.zip HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=public_html.tar HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=mail.zip HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?edit=.clwpos.tar&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=.cl.selector.zip HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=ssl.tar HTTP/2" 200 8426 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvbG9ncy50YXIuZ3o%3D HTTP/2" 200 117856 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F&rights=mehradhospital.ir HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXRjLnRhci5neg%3D%3D HTTP/2" 200 47780 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvc3NsLnRhci5neg%3D%3D HTTP/2" 200 16558 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvMTIzLnBocA%3D%3D HTTP/2" 200 137 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvYWNjZXNzLWxvZ3MudGFyLmd6 HTTP/2" 200 9237 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:05 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fetc%2F&rename=mehradh2.rcube.db HTTP/2" 200 8411 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvcHVibGljX2h0bWwudGFyLmd6 HTTP/2" 200 16783812 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvcHVibGljX2h0bWwudGFy HTTP/2" 200 16661522 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:03 +0330] "GET /ff1.php?edit=server.c302.cloudmark.com.conf&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8754 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:03 +0330] "GET /ff1.php?edit=nvdata.cache&fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F HTTP/2" 200 8577 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:03 +0330] "GET /ff1.php?edit=server.c303.cloudmark.com.conf&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8756 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcy90bXA%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin%2F.. HTTP/2" 200 11712 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F.. HTTP/2" 200 11666 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.htpasswds%2F.. HTTP/2" 200 11596 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F.. HTTP/2" 200 11654 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Flscache%2F.. HTTP/2" 200 11697 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F.. HTTP/2" 200 11665 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:03 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC92Y2FyZHM%3D HTTP/2" 200 15299 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:03 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcy92YXI%3D HTTP/2" 200 15330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rename=ssl.zip HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F&rights=public_html.tar HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:32 +0330] "GET /ff1.php?edit=access-logs.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8445 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:33 +0330] "GET /ff1.php?edit=etc.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:46:33 +0330] "GET /ff1.php?edit=.spamassassinenable.spamassassinenable.tar.gz&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 8449 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?edit=Cpanel_SSL_DCV_DNS_Mutex&fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F HTTP/2" 200 8447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2Fvcards HTTP/2" 200 9823 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2Ficals HTTP/2" 200 9837 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=server.c301.cloudmark.com.conf HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=server.c302.cloudmark.com.conf HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=server.c303.cloudmark.com.conf HTTP/2" 200 8428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2Fcaches HTTP/2" 200 9448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=nvdata.cache HTTP/2" 200 8414 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=server.c301.cloudmark.com.conf HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9kYXRhc3RvcmU%3D HTTP/2" 200 15614 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:39 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9pY2Fscw%3D%3D HTTP/2" 200 15865 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F&rights=opt HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=icals HTTP/2" 200 8437 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=email_accounts.json HTTP/2" 200 8421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin%2F&rights=user_prefs HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F&rights=var HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=caches HTTP/2" 200 8436 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?edit=email_accounts_count&fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F HTTP/2" 200 8443 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=Cpanel_SSL_DCV_DNS_Mutex HTTP/2" 200 8432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?edit=servers.discovery.lst&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8460 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=datastore HTTP/2" 200 8415 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:04 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9pY2Fscw%3D%3D HTTP/2" 200 15819 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?edit=email_accounts.json&fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F HTTP/2" 200 8781 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=nvdata HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=datastore HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F&rename=tmp HTTP/2" 200 8407 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?edit=servers.nomination.lst&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8472 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=nvdata HTTP/2" 200 8436 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?edit=user_prefs&fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin%2F HTTP/2" 200 9406 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F&rights=tmp HTTP/2" 200 8441 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:32 +0330] "GET /ff1.php?edit=razor-agent.log&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8712 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:31 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9udmRhdGE%3D HTTP/2" 200 15953 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:48:32 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9jYWNoZXM%3D HTTP/2" 200 16083 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F&rename=var HTTP/2" 200 8407 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=icals HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?edit=servers.catalogue.lst&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8466 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=email_accounts_count HTTP/2" 200 8419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F&rename=opt HTTP/2" 200 8411 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=email_accounts.json HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:01 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=vcards HTTP/2" 200 8438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:02 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=servers.nomination.lst HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:02 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=caches HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:02 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=Cpanel_SSL_DCV_DNS_Mutex HTTP/2" 200 8433 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:02 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=razor-agent.log HTTP/2" 200 8429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:26 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlcnMuY2F0YWxvZ3VlLmxzdA%3D%3D HTTP/2" 200 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:26 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9lbWFpbF9hY2NvdW50cy5qc29u HTTP/2" 200 438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:26 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbi91c2VyX3ByZWZz HTTP/2" 200 1081 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:27 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9lbWFpbF9hY2NvdW50c19jb3VudA%3D%3D HTTP/2" 200 102 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=server.c302.cloudmark.com.conf HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcy9vcHQ%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rights=nvdata.cache HTTP/2" 200 8425 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2Fvar HTTP/2" 200 9749 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=server.c303.cloudmark.com.conf HTTP/2" 200 8442 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin%2F. HTTP/2" 200 9383 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2F. HTTP/2" 200 9478 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:34 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F. HTTP/2" 200 10229 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:34 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.htpasswds%2F. HTTP/2" 200 9119 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:34 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Flscache%2F. HTTP/2" 200 9102 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcy92YXI%3D HTTP/2" 200 15400 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:47:33 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC92Y2FyZHM%3D HTTP/2" 200 15492 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 79.142.74.44 - - [28/Feb/2026:06:47:48 +0330] "GET /payment/index.php HTTP/2" 404 796 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G925R4 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Mobile Safari/537.36" 216.73.216.80 - - [28/Feb/2026:06:49:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=servers.discovery.lst HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:47 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3Jhem9yLWFnZW50LmxvZw%3D%3D HTTP/2" 200 400 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=servers.catalogue.lst HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:27 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9udmRhdGEuY2FjaGU%3D HTTP/2" 200 257 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:27 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=servers.catalogue.lst HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:26 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlcnMuY2F0YWxvZ3VlLmxzdA%3D%3D HTTP/2" 200 16259 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:26 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9lbWFpbF9hY2NvdW50cy5qc29u HTTP/2" 200 16584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:26 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlcnMuZGlzY292ZXJ5LmxzdA%3D%3D HTTP/2" 200 16414 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:27 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9lbWFpbF9hY2NvdW50c19jb3VudA%3D%3D HTTP/2" 200 16834 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:27 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbi91c2VyX3ByZWZz HTTP/2" 200 16769 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlci5jMzAzLmNsb3VkbWFyay5jb20uY29uZg%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlci5jMzAzLmNsb3VkbWFyay5jb20uY29uZg%3D%3D HTTP/2" 200 419 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlci5jMzAyLmNsb3VkbWFyay5jb20uY29uZg%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlci5jMzAyLmNsb3VkbWFyay5jb20uY29uZg%3D%3D HTTP/2" 200 434 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlci5jMzAxLmNsb3VkbWFyay5jb20uY29uZg%3D%3D HTTP/2" 200 434 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlci5jMzAxLmNsb3VkbWFyay5jb20uY29uZg%3D%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9DcGFuZWxfU1NMX0RDVl9ETlNfTXV0ZXg%3D HTTP/2" 200 100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlcnMubm9taW5hdGlvbi5sc3Q%3D HTTP/2" 200 136 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=email_accounts_count HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=servers.nomination.lst HTTP/2" 200 8427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2F&rename=vcards HTTP/2" 200 8415 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rename=razor-agent.log HTTP/2" 200 8415 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.spamassassin%2F&rename=user_prefs HTTP/2" 200 8414 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:48 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F&rights=servers.discovery.lst HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:47 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3Jhem9yLWFnZW50LmxvZw%3D%3D HTTP/2" 200 16995 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:49:47 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9udmRhdGEuY2FjaGU%3D HTTP/2" 200 17193 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2Fdatastore HTTP/2" 200 10647 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F. HTTP/2" 200 9934 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2Fopt HTTP/2" 200 9392 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcy90bXA%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F HTTP/2" 200 11628 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:30 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cpanel%2Fnvdata HTTP/2" 200 10034 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:30 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcy9vcHQ%3D HTTP/2" 200 6582 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:30 +0330] "GET /ff1.php?edit=server.c301.cloudmark.com.conf&fm=true&path=%2Fhome%2Fmehradh2%2F.razor%2F HTTP/2" 200 8756 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:24 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlcnMuZGlzY292ZXJ5LmxzdA%3D%3D HTTP/2" 200 136 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:24 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnJhem9yL3NlcnZlcnMubm9taW5hdGlvbi5sc3Q%3D HTTP/2" 200 17494 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:24 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9DcGFuZWxfU1NMX0RDVl9ETlNfTXV0ZXg%3D HTTP/2" 200 17655 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:00 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F.. HTTP/2" 200 11713 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:00 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F.. HTTP/2" 200 11681 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:00 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.koality%2F.. HTTP/2" 200 11621 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3NsL2tleXM%3D HTTP/2" 200 17949 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:00 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3NsL2tleXM%3D HTTP/2" 200 18156 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:20 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp%2F.. HTTP/2" 200 11624 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:20 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos%2F.. HTTP/2" 200 11604 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:20 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3NsL2NlcnRz HTTP/2" 200 18070 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:20 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3NsL2NlcnRz HTTP/2" 200 18193 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:20 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3NsL2NzcnM%3D HTTP/2" 200 17932 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2Facme-challenge%2F.. HTTP/2" 200 9384 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F&rename=htaccess_cache HTTP/2" 200 8423 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:06 +0330] "GET /ff1.php?edit=ssl.db&fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F HTTP/2" 200 10747 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:30 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cagefs%2Ftmp HTTP/2" 200 9747 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9udmRhdGE%3D HTTP/2" 200 17852 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9jYWNoZXM%3D HTTP/2" 200 17990 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:50:29 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbC9kYXRhc3RvcmU%3D HTTP/2" 200 18008 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:41 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2Fkeys HTTP/2" 200 9949 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:41 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F. HTTP/2" 200 9758 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:41 +0330] "GET /ff1.php?edit=ssl.db.cache&fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F HTTP/2" 200 10931 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:41 +0330] "GET /ff1.php?edit=htaccess_cache&fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F HTTP/2" 200 8469 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:51:41 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3NsL2NzcnM%3D HTTP/2" 200 18223 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:52:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2Fcsrs HTTP/2" 200 9109 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:52:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2Fcerts HTTP/2" 200 10485 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:52:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F. HTTP/2" 200 9549 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:52:11 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.koality%2F. HTTP/2" 200 9107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:52:11 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvc3NsL3NzbC5kYg%3D%3D HTTP/2" 200 18274 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp%2F. HTTP/2" 200 9358 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rename=ssl.db.cache HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:28 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos%2F. HTTP/2" 200 9367 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:28 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvc3NsL3NzbC5kYg%3D%3D HTTP/2" 200 2389 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:28 +0330] "GET /ff1.php?edit=defaults.cfg&fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F HTTP/2" 200 8801 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp%2Fincoming HTTP/2" 200 9097 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2F HTTP/2" 200 9399 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:49 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rights=ssl.db HTTP/2" 200 8414 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:49 +0330] "GET /ff1.php?delete=.spamassassin.zip&fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F HTTP/2" 200 18311 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:49 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcy9tYWluLmxvZw%3D%3D HTTP/2" 200 18373 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:06 +0330] "GET /ff1.php?edit=main.log&fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos%2F HTTP/2" 200 8431 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rename=ssl.db HTTP/2" 200 8413 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rights=csrs HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rights=certs HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:06 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cC9pbmNvbWluZw%3D%3D HTTP/2" 200 18377 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rename=csrs HTTP/2" 200 8409 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F&rename=defaults.cfg HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F&rights=defaults.cfg HTTP/2" 200 8424 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rights=keys HTTP/2" 200 8444 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:54:47 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rename=certs HTTP/2" 200 8408 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rename=keys HTTP/2" 200 8412 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_html%2F.well-known%2Facme-challenge%2F. HTTP/2" 200 9117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:09 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos%2F&rights=main.log HTTP/2" 200 8418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:09 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcy9tYWluLmxvZw%3D%3D HTTP/2" 200 101 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:09 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cC9pbmNvbWluZw%3D%3D HTTP/2" 200 18379 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:43 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9yL2RlZmF1bHRzLmNmZw%3D%3D HTTP/2" 200 463 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:43 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp%2F&rename=incoming HTTP/2" 200 8415 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:43 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9yL2h0YWNjZXNzX2NhY2hl HTTP/2" 200 159 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:43 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9yL2RlZmF1bHRzLmNmZw%3D%3D HTTP/2" 200 18799 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.cl.selector%2F&rights=htaccess_cache HTTP/2" 200 8430 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:53:06 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fssl%2F&rights=ssl.db.cache HTTP/2" 200 8416 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:35 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvc3NsL3NzbC5kYi5jYWNoZQ%3D%3D HTTP/2" 200 2556 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2Fpublic_ftp%2F&rights=incoming HTTP/2" 200 8448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:35 +0330] "GET /ff1.php?fm=true&path=%2Fhome%2Fmehradh2%2F.clwpos%2F&rename=main.log HTTP/2" 200 8417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:35 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvc3NsL3NzbC5kYi5jYWNoZQ%3D%3D HTTP/2" 200 18514 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 216.73.216.80 - - [28/Feb/2026:06:55:35 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9yL2h0YWNjZXNzX2NhY2hl HTTP/2" 200 18674 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"