ÿØÿà JFIF 

  
 
  ÿÛ „ 	 ( %!1!%*+...983,7(-.-


49.51.52.250 - - [27/Feb/2026:15:59:16 +0330] "GET /ff1.php HTTP/1.1" 200 10809 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.166.244.192 - - [27/Feb/2026:16:12:58 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10862 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.157.22.109 - - [27/Feb/2026:16:17:33 +0330] "GET / HTTP/1.1" 200 900 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.135.148.92 - - [27/Feb/2026:16:22:47 +0330] "GET /ff1.php?fm=true&rename=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9048 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.135.145.117 - - [27/Feb/2026:17:12:35 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10840 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.135.133.241 - - [27/Feb/2026:17:22:49 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10807 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.157.156.190 - - [27/Feb/2026:17:32:14 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 24142 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.134.141.244 - - [27/Feb/2026:15:45:44 +0330] "GET / HTTP/1.1" 200 902 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.130.9.111 - - [27/Feb/2026:16:33:56 +0330] "GET /ff1.php?fm=true&edit=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 35114 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
49.51.166.228 - - [27/Feb/2026:16:42:21 +0330] "GET /ff1.php?fm=true&rename=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8966 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.156.204.134 - - [27/Feb/2026:16:51:51 +0330] "GET /ff1.php?fm_settings=true HTTP/1.1" 200 9930 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.135.182.43 - - [27/Feb/2026:17:03:56 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8973 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /class-t.api.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /zwso.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:57 +0330] "GET /class19.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:58 +0330] "GET /class20.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:58 +0330] "GET /admin.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:58 +0330] "GET /randkeyword.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:59 +0330] "GET /fwe.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:59 +0330] "GET /images/m.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:37:59 +0330] "GET /g.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /tx1.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /xv.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /x56.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /htaccess.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:00 +0330] "GET /readme.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:01 +0330] "GET /x50.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:01 +0330] "GET /fv.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:02 +0330] "GET /file.php? HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:02 +0330] "GET /lsd.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:02 +0330] "GET /as.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /wsd.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /gtc.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /atx.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:03 +0330] "GET /z60.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /m.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /themes.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:04 +0330] "GET /click.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:05 +0330] "GET /install.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:05 +0330] "GET /lv.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:05 +0330] "GET /simple.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /w.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:06 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /ioxi-o.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /0x.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /222.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:07 +0330] "GET /wp-content/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /admin.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /classwithtostring.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /abcd.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:08 +0330] "GET /inputs.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:09 +0330] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /manager.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /item.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /plugins/Cache/footer.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:10 +0330] "GET /mail.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:11 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:11 +0330] "GET /sx.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:11 +0330] "GET /wp-admin/maint/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /1.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /byp.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /wp-trackback.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /.well-known/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:12 +0330] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-admin/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /gmo.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /css/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:13 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /filemanager/dialog.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /index/function.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:14 +0330] "GET /uploads/autoload_classmap.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /ww1.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /about/function.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /admin/function.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:15 +0330] "GET /css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:16 +0330] "GET /security.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:17 +0330] "GET /wp-content/radio.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /.well-known/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /wp-content/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:18 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /.well-known/log.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /class.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:19 +0330] "GET /bless5.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /lock360.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /f35.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /ioxi-o1.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:20 +0330] "GET /juuuu.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /ha.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /gg.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /we2.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /04.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:21 +0330] "GET /333.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /520.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /ar.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /x.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:22 +0330] "GET /xx.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /gifclass4.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /2clas.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /ave.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:23 +0330] "GET /wrt.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /bibil.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /radio.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /files.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /file7.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /gifclass.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:24 +0330] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 404 796 "-" "-"
43.153.73.200 - - [27/Feb/2026:17:43:26 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 7132 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /nox.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /file48.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /info.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /class9.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:25 +0330] "GET /la.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:26 +0330] "GET /bless11.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:26 +0330] "GET /ccou.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /ton.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /file9.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /ac.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /new4.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:27 +0330] "GET /pop.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /az.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /xaz.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /up4.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /1aa.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:28 +0330] "GET /elp.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:29 +0330] "GET /wtz.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:29 +0330] "GET /galex.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:29 +0330] "GET /xb.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:30 +0330] "GET /ova.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:30 +0330] "GET /vx.php HTTP/1.1" 404 796 "-" "-"
20.104.124.39 - - [27/Feb/2026:17:38:30 +0330] "GET /rh.php HTTP/1.1" 404 796 "-" "-"
43.133.91.48 - - [27/Feb/2026:17:52:23 +0330] "GET /ff1.php?fm_settings=true&fm_config_delete=true HTTP/1.1" 200 118 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.68.111.215 - - [27/Feb/2026:18:24:02 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)"
51.68.111.215 - - [27/Feb/2026:18:24:02 +0330] "GET / HTTP/1.1" 200 743 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)"
145.239.65.133 - - [27/Feb/2026:20:04:14 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
145.239.65.133 - - [27/Feb/2026:20:04:16 +0330] "GET /ff1.php HTTP/1.1" 200 9989 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
145.239.65.133 - - [27/Feb/2026:20:04:17 +0330] "GET /include.php HTTP/1.1" 200 3165 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
182.44.10.67 - - [27/Feb/2026:20:07:40 +0330] "GET / HTTP/1.1" 200 903 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
51.68.111.205 - - [27/Feb/2026:20:38:20 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)"
51.68.111.205 - - [27/Feb/2026:20:38:21 +0330] "GET / HTTP/1.1" 200 746 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)"
192.71.23.211 - - [27/Feb/2026:21:20:14 +0330] "GET / HTTP/1.1" 200 899 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3"
3.214.10.111 - - [27/Feb/2026:21:23:17 +0330] "GET / HTTP/1.1" 200 899 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
43.133.69.37 - - [27/Feb/2026:21:39:53 +0330] "GET / HTTP/1.1" 200 903 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
94.103.87.20 - - [27/Feb/2026:22:01:42 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
94.103.87.20 - - [27/Feb/2026:22:01:44 +0330] "GET /ff1.php HTTP/1.1" 200 10043 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
20.220.144.87 - - [27/Feb/2026:22:21:14 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-"
20.220.144.87 - - [27/Feb/2026:22:21:15 +0330] "GET /god.php HTTP/1.1" 404 796 "-" "-"
20.220.144.87 - - [27/Feb/2026:22:21:15 +0330] "GET /bs4.PhP7 HTTP/1.1" 404 796 "-" "-"
20.220.144.87 - - [27/Feb/2026:22:21:15 +0330] "GET /ff1.php HTTP/1.1" 200 28859 "-" "-"
43.157.188.74 - - [27/Feb/2026:23:05:58 +0330] "GET / HTTP/1.1" 200 898 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
185.122.114.33 - - [27/Feb/2026:23:11:24 +0330] "GET / HTTP/1.1" 200 900 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g"
43.166.131.228 - - [27/Feb/2026:23:21:36 +0330] "GET /ff1.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
152.53.187.237 - - [27/Feb/2026:23:22:37 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:39 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 280 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:41 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 2107 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:43 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 1653 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:45 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 23944 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:49 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 32625 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:53 +0330] "GET /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8612 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:55 +0330] "GET /ff1.php?fm=true&edit=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:57 +0330] "GET /ff1.php?fm=true&edit=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 25490 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:22:59 +0330] "GET /ff1.php?fm=true&edit=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10026 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:02 +0330] "GET /ff1.php?fm=true&edit=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 40994 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:04 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/. HTTP/1.1" 200 10047 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:08 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.. HTTP/1.1" 200 11696 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:10 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known HTTP/1.1" 200 9396 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:12 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin HTTP/1.1" 200 9115 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:14 +0330] "GET /ff1.php?fm=true&rename=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:17 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:19 +0330] "GET /ff1.php?fm=true&rename=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:22 +0330] "GET /ff1.php?fm=true&rename=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:37 +0330] "GET /ff1.php?fm=true&rename=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:39 +0330] "GET /ff1.php?fm=true&rename=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:42 +0330] "GET /ff1.php?fm=true&rename=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:44 +0330] "GET /ff1.php?fm=true&rights=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8437 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:47 +0330] "GET /ff1.php?fm=true&rights=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8468 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:50 +0330] "GET /ff1.php?fm=true&rights=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8460 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:52 +0330] "GET /ff1.php?fm=true&rights=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8438 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:55 +0330] "GET /ff1.php?fm=true&rights=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:23:58 +0330] "GET /ff1.php?fm=true&rights=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:00 +0330] "GET /ff1.php?fm=true&rights=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:02 +0330] "GET /ff1.php?fm_settings=true HTTP/1.1" 200 9277 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:04 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10010 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:07 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10040 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:09 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 10225 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:12 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 10350 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:15 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 10464 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:17 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 10596 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:20 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 10828 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:22 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 21849 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:24 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 6785 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:29 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10725 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
152.53.187.237 - - [27/Feb/2026:23:24:31 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10684 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
119.28.89.249 - - [27/Feb/2026:23:39:03 +0330] "GET /ff1.php?fm=true&edit=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 12510 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
170.106.35.153 - - [27/Feb/2026:23:54:16 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/. HTTP/1.1" 200 11590 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
65.108.78.33 - - [27/Feb/2026:23:59:06 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 280 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:08 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 2994 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 23942 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 32627 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:15 +0330] "GET /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8614 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:18 +0330] "GET /ff1.php?fm=true&edit=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 25525 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:20 +0330] "GET /ff1.php?fm=true&edit=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10082 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:38 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.. HTTP/1.1" 200 11732 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:42 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin HTTP/1.1" 200 9106 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:43 +0330] "GET /ff1.php?fm=true&rename=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:47 +0330] "GET /ff1.php?fm=true&rename=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:50 +0330] "GET /ff1.php?fm=true&rename=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8423 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:54 +0330] "GET /ff1.php?fm=true&rename=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:57 +0330] "GET /ff1.php?fm=true&rights=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8463 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:59 +0330] "GET /ff1.php?fm=true&rights=cgi-bin&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8461 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:04 +0330] "GET /ff1.php?fm=true&rights=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:07 +0330] "GET /ff1.php?fm_settings=true HTTP/1.1" 200 9266 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:11 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10740 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:13 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNz HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:18 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:23 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 6799 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:27 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvY2dpLWJpbg== HTTP/1.1" 200 10749 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
43.133.253.253 - - [27/Feb/2026:23:47:06 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 6854 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
65.108.78.33 - - [27/Feb/2026:23:59:05 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:10 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 1655 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:17 +0330] "GET /ff1.php?fm=true&edit=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 11514 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:22 +0330] "GET /ff1.php?fm=true&edit=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 41104 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:24 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/. HTTP/1.1" 200 10746 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:40 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known HTTP/1.1" 200 9410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:45 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:48 +0330] "GET /ff1.php?fm=true&rename=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8428 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:52 +0330] "GET /ff1.php?fm=true&rename=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [27/Feb/2026:23:59:55 +0330] "GET /ff1.php?fm=true&rights=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8438 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:00 +0330] "GET /ff1.php?fm=true&rights=error_log&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8437 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:02 +0330] "GET /ff1.php?fm=true&rights=ff1.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:06 +0330] "GET /ff1.php?fm=true&rights=include.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:09 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10723 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:14 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9n HTTP/1.1" 200 10854 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:16 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHA= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:19 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:21 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 21873 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:00:00:25 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24= HTTP/1.1" 200 10752 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
43.130.91.95 - - [28/Feb/2026:00:07:22 +0330] "GET /ff1.php?fm=true&rename=.well-known&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8972 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.130.15.147 - - [28/Feb/2026:00:18:13 +0330] "GET /ff1.php?fm=true&rights=form.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9053 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
170.106.72.93 - - [28/Feb/2026:00:26:27 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHA= HTTP/1.1" 200 32845 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.130.3.120 - - [28/Feb/2026:00:36:04 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 11696 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.155.129.131 - - [28/Feb/2026:00:45:17 +0330] "GET /ff1.php?fm=true&rights=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9058 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.166.244.66 - - [28/Feb/2026:00:59:15 +0330] "GET /ff1.php?fm=true&edit=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9353 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
170.106.161.78 - - [28/Feb/2026:01:06:57 +0330] "GET /ff1.php?proxy=true HTTP/1.1" 200 7132 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
49.51.233.46 - - [28/Feb/2026:01:16:20 +0330] "GET /ff1.php?phpinfo=true HTTP/1.1" 200 24145 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
188.165.208.215 - - [28/Feb/2026:01:46:01 +0330] "GET /cgi-bin/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0"
13.71.191.191 - - [28/Feb/2026:02:16:11 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:11 +0330] "GET /plugins.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:11 +0330] "GET /erty.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /sa.php7 HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /ws77.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /wp9.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /lp6.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /ms-edit.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:12 +0330] "GET /wp-the.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /gifclass.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /hplfuns.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /8.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /shop.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:13 +0330] "GET /cxxuv.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /b.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /gi.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /e0v9e95c.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /2gz1dxix.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /ws75.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:14 +0330] "GET /ws49.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /bak.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /Y5MxLiVO9nK.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /wp-f.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /install.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /tx78.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:15 +0330] "GET /wp_bqLC0MQe.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /0bb45ctt.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /ws80.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /tx79.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /jp.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /sbhu.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:16 +0330] "GET /tt.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /62ix02bk.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /wdf.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /f6ijmjpa.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /wp_jVML8V37.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /4wj632p1.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:17 +0330] "GET /ws81.php HTTP/1.1" 404 796 "-" "-"
13.71.191.191 - - [28/Feb/2026:02:16:18 +0330] "GET /e31hmf9b.php HTTP/1.1" 404 796 "-" "-"
182.42.111.213 - - [28/Feb/2026:02:53:35 +0330] "GET / HTTP/1.1" 200 1484 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-"
20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /god.php HTTP/1.1" 404 796 "-" "-"
20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /bs4.PhP7 HTTP/1.1" 404 796 "-" "-"
20.220.144.87 - - [28/Feb/2026:03:01:00 +0330] "GET /ff1.php HTTP/1.1" 200 37807 "-" "-"
65.108.78.33 - - [28/Feb/2026:03:04:38 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:04:52 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:04:54 +0330] "GET /ff1.php?fm=true&rename=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:01 +0330] "GET /ff1.php?fm=true&rename=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:04 +0330] "GET /ff1.php?fm=true&rename=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8409 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:11 +0330] "GET /ff1.php?fm=true&rename=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:13 +0330] "GET /ff1.php?fm=true&rename=www&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:14 +0330] "GET /ff1.php?fm=true&rights=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:18 +0330] "GET /ff1.php?fm=true&rights=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:20 +0330] "GET /ff1.php?fm=true&rights=.koality&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:21 +0330] "GET /ff1.php?fm=true&rights=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:24 +0330] "GET /ff1.php?fm=true&rights=.razor&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:30 +0330] "GET /ff1.php?fm=true&rights=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:35 +0330] "GET /ff1.php?fm=true&rights=acme-challenge&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 8464 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:40 +0330] "GET /ff1.php?fm=true&rights=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:44 +0330] "GET /ff1.php?fm=true&rights=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8439 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:45 +0330] "GET /ff1.php?fm=true&rights=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8438 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:04:40 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc HTTP/1.1" 200 9580 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:04:56 +0330] "GET /ff1.php?fm=true&rename=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8430 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:04:57 +0330] "GET /ff1.php?fm=true&rename=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:04:59 +0330] "GET /ff1.php?fm=true&rename=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:02 +0330] "GET /ff1.php?fm=true&rename=logs&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:06 +0330] "GET /ff1.php?fm=true&rename=mail&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:08 +0330] "GET /ff1.php?fm=true&rename=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:09 +0330] "GET /ff1.php?fm=true&rename=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:16 +0330] "GET /ff1.php?fm=true&rights=.htpasswds&path=/home/mehradh2/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:23 +0330] "GET /ff1.php?fm=true&rights=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:26 +0330] "GET /ff1.php?fm=true&rights=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:28 +0330] "GET /ff1.php?fm=true&rights=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:31 +0330] "GET /ff1.php?fm=true&rights=.trash&path=/home/mehradh2/ HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:33 +0330] "GET /ff1.php?fm=true&rights=access-logs&path=/home/mehradh2/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:37 +0330] "GET /ff1.php?fm=true&rights=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:38 +0330] "GET /ff1.php?fm=true&rights=etc&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:42 +0330] "GET /ff1.php?fm=true&rights=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:47 +0330] "GET /ff1.php?fm=true&rights=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8444 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:52 +0330] "GET /ff1.php?fm=true&rights=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:56 +0330] "GET /ff1.php?fm=true&rights=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:49 +0330] "GET /ff1.php?fm=true&rights=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8439 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:50 +0330] "GET /ff1.php?fm=true&rights=logs&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:54 +0330] "GET /ff1.php?fm=true&rights=mail&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:57 +0330] "GET /ff1.php?fm=true&rights=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
65.108.78.33 - - [28/Feb/2026:03:05:59 +0330] "GET /ff1.php?fm=true&rights=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:36 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:38 +0330] "GET /'%20.%20$url_inc%20.%20'&edit='%20.%20$file%20.%20'&path='%20.%20$path.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:41 +0330] "GET /'%20.%20$url_inc%20.%20'&rights='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:44 +0330] "GET /'.$url_inc.'&delete='.$destination.'&path='%20.%20$path.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:48 +0330] "GET /'.fm_site_url().' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:50 +0330] "GET /'.fm_url($full).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:55 +0330] "GET /%3C?%3E HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:57 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 197 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:02 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 279 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 267 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:07 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 101 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:09 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLnRhcg== HTTP/1.1" 200 372 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:14 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9nLnRhci5neg== HTTP/1.1" 200 5996 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:16 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 1737 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:22 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC5waHAudGFyLmd6 HTTP/1.1" 200 24699 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:25 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAudGFy HTTP/1.1" 200 32721 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:27 +0330] "GET /ff1.php?fm=true&delete=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10736 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:29 +0330] "GET /ff1.php?fm=true&delete=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10580 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:37 +0330] "GET /ff1.php?fm=true&edit=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8552 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:40 +0330] "GET /'%20.%20$url_inc%20.%20'&rename='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:43 +0330] "GET /'.$url.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:46 +0330] "GET /'.fm_img_link($filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:51 +0330] "GET /'.fm_url().'?fm_settings=true&fm_config_delete=true HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:53 +0330] "GET /'.fm_url(true).'?fm=true&edit='.basename($filename).'&path='.str_replace('/'.basename($filename),'/',$filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:21:58 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:00 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 260 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 200 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLmh0YWNjZXNzLnRhci5neg== HTTP/1.1" 200 405 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:18 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAudGFy HTTP/1.1" 200 1765 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC50YXI= HTTP/1.1" 200 24105 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 32745 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:30 +0330] "GET /ff1.php?fm=true&delete=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10498 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:32 +0330] "GET /ff1.php?fm=true&delete=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:34 +0330] "GET /ff1.php?fm=true&delete=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:36 +0330] "GET /ff1.php?fm=true&edit=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:41 +0330] "GET /ff1.php?fm=true&edit=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:43 +0330] "GET /ff1.php?fm=true&edit=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:44 +0330] "GET /ff1.php?fm=true&edit=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8523 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:46 +0330] "GET /ff1.php?fm=true&edit=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8637 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:39 +0330] "GET /ff1.php?fm=true&edit=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8579 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:50 +0330] "GET /ff1.php?fm=true&edit=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:51 +0330] "GET /ff1.php?fm=true&edit=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:53 +0330] "GET /ff1.php?fm=true&edit=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:57 +0330] "GET /ff1.php?fm=true&edit=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:58 +0330] "GET /ff1.php?fm=true&edit=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8450 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:02 +0330] "GET /ff1.php?fm=true&edit=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8456 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:05 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/. HTTP/1.1" 200 11678 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:09 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cagefs HTTP/1.1" 200 9486 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:10 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cl.selector HTTP/1.1" 200 9557 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:12 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.clwpos HTTP/1.1" 200 9376 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:14 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cpanel HTTP/1.1" 200 10259 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:16 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cphorde HTTP/1.1" 200 9605 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:24 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.spamassassin HTTP/1.1" 200 9385 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:33 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/mail HTTP/1.1" 200 11709 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:38 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10403 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:40 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/.. HTTP/1.1" 200 10399 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:41 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/ssl HTTP/1.1" 200 9767 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:43 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/tmp HTTP/1.1" 200 9602 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:47 +0330] "GET /ff1.php?fm=true&rename=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:05 +0330] "GET /ff1.php?fm=true&rename=.cagefs&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:48 +0330] "GET /ff1.php?fm=true&edit=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8507 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:22:55 +0330] "GET /ff1.php?fm=true&edit=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:00 +0330] "GET /ff1.php?fm=true&edit=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:03 +0330] "GET /ff1.php?fm=true&edit=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:07 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.. HTTP/1.1" 200 9338 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:19 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.htpasswds HTTP/1.1" 200 9128 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:21 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.koality HTTP/1.1" 200 9117 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:22 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.razor HTTP/1.1" 200 10001 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:26 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.trash HTTP/1.1" 200 9095 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:28 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/access-logs HTTP/1.1" 200 9561 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:29 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/logs HTTP/1.1" 200 9676 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:31 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/lscache HTTP/1.1" 200 9120 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:35 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_ftp HTTP/1.1" 200 9370 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:36 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html HTTP/1.1" 200 10405 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:23:45 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/www HTTP/1.1" 200 10405 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:01 +0330] "GET /ff1.php?fm=true&rename=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:03 +0330] "GET /ff1.php?fm=true&rename=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:07 +0330] "GET /ff1.php?fm=true&rename=.cl.selector&path=/home/mehradh2/ HTTP/1.1" 200 8420 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:08 +0330] "GET /ff1.php?fm=true&rename=.clwpos&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:10 +0330] "GET /ff1.php?fm=true&rename=.cpanel&path=/home/mehradh2/ HTTP/1.1" 200 8410 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:12 +0330] "GET /ff1.php?fm=true&rename=.cphorde&path=/home/mehradh2/ HTTP/1.1" 200 8412 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:13 +0330] "GET /ff1.php?fm=true&rename=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:15 +0330] "GET /ff1.php?fm=true&rename=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:22 +0330] "GET /ff1.php?fm=true&rename=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:29 +0330] "GET /ff1.php?fm=true&rename=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:35 +0330] "GET /ff1.php?fm=true&rename=access-logs&path=/home/mehradh2/ HTTP/1.1" 200 8419 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:40 +0330] "GET /ff1.php?fm=true&rename=etc&path=/home/mehradh2/ HTTP/1.1" 200 8415 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:42 +0330] "GET /ff1.php?fm=true&rename=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:43 +0330] "GET /ff1.php?fm=true&rename=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:45 +0330] "GET /ff1.php?fm=true&rename=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:49 +0330] "GET /ff1.php?fm=true&rename=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8430 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:50 +0330] "GET /ff1.php?fm=true&rename=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:56 +0330] "GET /ff1.php?fm=true&rename=mail&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:57 +0330] "GET /ff1.php?fm=true&rename=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:59 +0330] "GET /ff1.php?fm=true&rename=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8420 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:01 +0330] "GET /ff1.php?fm=true&rename=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:10 +0330] "GET /ff1.php?fm=true&rights=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:12 +0330] "GET /ff1.php?fm=true&rights=.cagefs&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:16 +0330] "GET /ff1.php?fm=true&rights=.clwpos&path=/home/mehradh2/ HTTP/1.1" 200 8450 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:17 +0330] "GET /ff1.php?fm=true&rights=.cpanel&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:22 +0330] "GET /ff1.php?fm=true&rights=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:17 +0330] "GET /ff1.php?fm=true&rename=.htpasswds&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:19 +0330] "GET /ff1.php?fm=true&rename=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8426 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:21 +0330] "GET /ff1.php?fm=true&rename=.koality&path=/home/mehradh2/ HTTP/1.1" 200 8412 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:24 +0330] "GET /ff1.php?fm=true&rename=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:26 +0330] "GET /ff1.php?fm=true&rename=.razor&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:28 +0330] "GET /ff1.php?fm=true&rename=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:31 +0330] "GET /ff1.php?fm=true&rename=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8424 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:33 +0330] "GET /ff1.php?fm=true&rename=.trash&path=/home/mehradh2/ HTTP/1.1" 200 8414 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:36 +0330] "GET /ff1.php?fm=true&rename=acme-challenge&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:38 +0330] "GET /ff1.php?fm=true&rename=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8435 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:47 +0330] "GET /ff1.php?fm=true&rename=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:52 +0330] "GET /ff1.php?fm=true&rename=logs&path=/home/mehradh2/ HTTP/1.1" 200 8415 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:24:54 +0330] "GET /ff1.php?fm=true&rename=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8408 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:03 +0330] "GET /ff1.php?fm=true&rename=tmp&path=/home/mehradh2/ HTTP/1.1" 200 8415 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:05 +0330] "GET /ff1.php?fm=true&rename=www&path=/home/mehradh2/ HTTP/1.1" 200 8416 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:06 +0330] "GET /ff1.php?fm=true&rights=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8429 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:08 +0330] "GET /ff1.php?fm=true&rights=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:14 +0330] "GET /ff1.php?fm=true&rights=.cl.selector&path=/home/mehradh2/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:19 +0330] "GET /ff1.php?fm=true&rights=.cphorde&path=/home/mehradh2/ HTTP/1.1" 200 8444 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:21 +0330] "GET /ff1.php?fm=true&rights=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:24 +0330] "GET /ff1.php?fm=true&rights=.htpasswds&path=/home/mehradh2/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:27 +0330] "GET /ff1.php?fm=true&rights=.koality&path=/home/mehradh2/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:31 +0330] "GET /ff1.php?fm=true&rights=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8432 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:33 +0330] "GET /ff1.php?fm=true&rights=.razor&path=/home/mehradh2/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:36 +0330] "GET /ff1.php?fm=true&rights=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:38 +0330] "GET /ff1.php?fm=true&rights=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:40 +0330] "GET /ff1.php?fm=true&rights=.trash&path=/home/mehradh2/ HTTP/1.1" 200 8442 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:43 +0330] "GET /ff1.php?fm=true&rights=acme-challenge&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 8463 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:50 +0330] "GET /ff1.php?fm=true&rights=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:51 +0330] "GET /ff1.php?fm=true&rights=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8445 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:53 +0330] "GET /ff1.php?fm=true&rights=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:58 +0330] "GET /ff1.php?fm=true&rights=logs&path=/home/mehradh2/ HTTP/1.1" 200 8443 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:00 +0330] "GET /ff1.php?fm=true&rights=lscache&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:05 +0330] "GET /ff1.php?fm=true&rights=public_html&path=/home/mehradh2/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:07 +0330] "GET /ff1.php?fm=true&rights=ssl&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:14 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:21 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 10956 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:29 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 10952 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:33 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 11102 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:35 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 11239 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:37 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 11244 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:26 +0330] "GET /ff1.php?fm=true&rights=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8431 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:29 +0330] "GET /ff1.php?fm=true&rights=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:34 +0330] "GET /ff1.php?fm=true&rights=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8455 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:41 +0330] "GET /ff1.php?fm=true&rights=access-logs&path=/home/mehradh2/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:44 +0330] "GET /ff1.php?fm=true&rights=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8437 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:46 +0330] "GET /ff1.php?fm=true&rights=etc&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:48 +0330] "GET /ff1.php?fm=true&rights=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8442 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:55 +0330] "GET /ff1.php?fm=true&rights=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8441 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:25:56 +0330] "GET /ff1.php?fm=true&rights=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8433 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:02 +0330] "GET /ff1.php?fm=true&rights=mail&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:04 +0330] "GET /ff1.php?fm=true&rights=public_ftp&path=/home/mehradh2/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:09 +0330] "GET /ff1.php?fm=true&rights=tmp&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:10 +0330] "GET /ff1.php?fm=true&rights=www&path=/home/mehradh2/ HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:12 +0330] "GET /ff1.php?fm_settings=true&fm_config_delete=true HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:16 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/1.1" 200 10579 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:17 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 10706 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:19 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 10822 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:31 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 10956 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:39 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 11362 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:43 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 11621 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:47 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:27:29 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 11832 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:27:48 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 11835 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:28:55 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:40 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:26:45 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 11619 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:28:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:28:44 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 11892 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:29:38 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvdG1w HTTP/1.1" 200 4554 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:30:22 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 12172 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:30:53 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 12337 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:31:08 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 12568 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:31:36 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 12676 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:32 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 13018 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:36 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 13180 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:38 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 13340 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:42 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/1.1" 200 13493 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:44 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 13509 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:47 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 13587 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:49 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 13560 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:51 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 13595 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:53 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 13588 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:55 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 13602 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:04 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 13888 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:06 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 13979 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:08 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 13900 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:10 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 14043 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:38 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 14084 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:34:13 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 13936 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:04 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 12885 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:41 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:57 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 13751 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:32:59 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 13657 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:02 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 13821 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:40 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 14043 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:33:42 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
62.84.185.67 - - [28/Feb/2026:04:34:16 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
188.253.116.146 - - [28/Feb/2026:04:55:21 +0330] "GET /ff1.php HTTP/1.1" 200 15653 "http://www.openurls.com.cn/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:05:04:47 +0330] "GET /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9255 "http://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:05:04:51 +0330] "POST /ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9379 "http://mehradhospital.ir/ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:05:04:52 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 15710 "http://mehradhospital.ir/ff1.php?fm=true&edit=.htaccess&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:05:05:11 +0330] "POST /ff1.php?fm=true HTTP/1.1" 200 15723 "http://mehradhospital.ir/ff1.php?fm=true&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:05:05:22 +0330] "POST /ff1.php?fm=true HTTP/1.1" 200 15923 "http://mehradhospital.ir/ff1.php?fm=true" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
65.21.136.254 - - [28/Feb/2026:05:21:47 +0330] "GET /error_log HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux i686; rv:147.0) Gecko/20100101 Firefox/147.0"
20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /zwso.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:52 +0330] "GET /class19.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /class20.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /admin.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /randkeyword.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /fwe.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /ioxi-o.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:53 +0330] "GET /images/m.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /g.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /tx1.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /xv.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /x56.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:54 +0330] "GET /htaccess.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /readme.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /x50.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /fv.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /file.php? HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /lsd.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:55 +0330] "GET /as.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /wsd.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /gtc.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /atx.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /z60.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:56 +0330] "GET /m.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /themes.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /wp-admin/maint/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /click.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /install.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:57 +0330] "GET /lv.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:58 +0330] "GET /simple.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:58 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /cong.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /w.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:24:59 +0330] "GET /0x.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /css.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /222.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /wp-content/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /admin.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:00 +0330] "GET /wp-admin/maint/maint.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /classwithtostring.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /abcd.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /autoload_classmap.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /inputs.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:01 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:02 +0330] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /manager.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /item.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /plugins/Cache/footer.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /404.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:03 +0330] "GET /mail.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /wp-content/plugins/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /sx.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /wp-admin/maint/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:04 +0330] "GET /alfa.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /1.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /byp.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /wp-trackback.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:05 +0330] "GET /.well-known/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /wp-admin/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /gmo.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:06 +0330] "GET /css/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-content/themes/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /filemanager/dialog.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-admin/maint/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:07 +0330] "GET /wp-includes/customize/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /index/function.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /uploads/autoload_classmap.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /wp-includes/style-engine/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /ww1.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /about/function.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:08 +0330] "GET /admin/function.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:09 +0330] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /css/colors/blue/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /security.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-admin/user/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:10 +0330] "GET /wp-includes/assets/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-content/radio.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /.well-known/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-content/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:11 +0330] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /.well-known/log.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /class.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /bless5.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:12 +0330] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /lock360.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /ioxi-o1.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /juuuu.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:13 +0330] "GET /ha.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /gg.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /we2.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /04.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /333.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /520.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:14 +0330] "GET /ar.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /x.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /xx.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /gifclass4.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /2clas.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:15 +0330] "GET /ave.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /wrt.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /bibil.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /radio.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /files.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /file7.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:16 +0330] "GET /gifclass.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /nox.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /file48.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /info.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /class9.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:17 +0330] "GET /la.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /bless11.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /ccou.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /ton.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /403.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /file9.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:18 +0330] "GET /ac.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /new4.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /pop.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /az.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /xaz.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:19 +0330] "GET /up4.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /1aa.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /elp.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /wtz.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /galex.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:20 +0330] "GET /xb.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /ova.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /vx.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /rh.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /wp-includes/certificates/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /wp-content/uploads/gravity_forms/g/e/e/a/Casper.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:21 +0330] "GET /spip.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /scripts/wpup.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /wordpress/update/wpupex.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /ho/wpup.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /wp-admin/maint/ HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:22 +0330] "GET /wp/wp-content/plugins/classic-editor/js/geido.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /myy.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-content/halo.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-includes/Requests/library/upload.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:23 +0330] "GET /wp-admin/js/index.php HTTP/1.1" 404 796 "-" "-"
20.104.82.189 - - [28/Feb/2026:05:25:24 +0330] "GET /dapa.php? HTTP/1.1" 404 796 "-" "-"
188.253.116.146 - - [28/Feb/2026:05:52:00 +0330] "GET /ff1.php HTTP/1.1" 200 15851 "http://www.openurls.com.cn/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
147.135.253.34 - - [28/Feb/2026:05:56:12 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:14 +0330] "GET /ff1.php?fm=true&edit=mehradh2.rcube.db&path=/home/mehradh2/etc/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:15 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc/. HTTP/1.1" 200 9571 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:17 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc/.. HTTP/1.1" 200 11617 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:18 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc/mehradhospital.ir HTTP/1.1" 200 10180 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:42 +0330] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:44 +0330] "GET /'%20.%20$url_inc%20.%20'&edit='%20.%20$file%20.%20'&path='%20.%20$path.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:46 +0330] "GET /'%20.%20$url_inc%20.%20'&rename='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:47 +0330] "GET /'%20.%20$url_inc%20.%20'&rights='%20.%20$file%20.%20'&path='%20.%20$path%20.%20' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:49 +0330] "GET /'.$url.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:50 +0330] "GET /'.$url_inc.'&delete='.$destination.'&path='%20.%20$path.' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:52 +0330] "GET /'.fm_img_link($filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:53 +0330] "GET /'.fm_site_url().' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:55 +0330] "GET /'.fm_url($full).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:56 +0330] "GET /'.fm_url().'?fm_settings=true&fm_config_delete=true HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:58 +0330] "GET /'.fm_url(true).'?fm=true&edit='.basename($filename).'&path='.str_replace('/'.basename($filename),'/',$filename).' HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:59 +0330] "GET /%3C?%3E HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:01 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 196 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:02 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:04 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 260 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:05 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 279 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:07 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 200 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:08 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 267 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:10 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:11 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 101 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:13 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLmh0YWNjZXNzLnRhci5neg== HTTP/1.1" 200 408 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:14 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLmh0YWNjZXNzLnRhcg== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:16 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZXJyb3JfbG9nLnRhci5neg== HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:17 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 1737 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:19 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZm9ybS5waHAudGFy HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:20 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC50YXI= HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:22 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvZmYxLnBocC5waHAudGFyLmd6 HTTP/1.1" 200 24699 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:23 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAucGhwLnRhci5neg== HTTP/1.1" 200 32743 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:25 +0330] "GET /ff1.php?download=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvaW5jbHVkZS5waHAudGFy HTTP/1.1" 200 100 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:26 +0330] "GET /ff1.php?fm=true&delete=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 14710 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:29 +0330] "GET /ff1.php?fm=true&edit=.bash_logout&path=/home/mehradh2/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:30 +0330] "GET /ff1.php?fm=true&edit=.bash_profile&path=/home/mehradh2/ HTTP/1.1" 200 8557 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:32 +0330] "GET /ff1.php?fm=true&edit=.bashrc&path=/home/mehradh2/ HTTP/1.1" 200 8579 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:33 +0330] "GET /ff1.php?fm=true&edit=.htaccess.htaccess.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:35 +0330] "GET /ff1.php?fm=true&edit=.htaccess.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8452 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:36 +0330] "GET /ff1.php?fm=true&edit=.imunify_patch_id&path=/home/mehradh2/ HTTP/1.1" 200 8518 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:37 +0330] "GET /ff1.php?fm=true&edit=.lastlogin&path=/home/mehradh2/ HTTP/1.1" 200 8635 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:39 +0330] "GET /ff1.php?fm=true&edit=.myimunify_id&path=/home/mehradh2/ HTTP/1.1" 200 8517 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:40 +0330] "GET /ff1.php?fm=true&edit=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:42 +0330] "GET /ff1.php?fm=true&edit=.spamassassinenable&path=/home/mehradh2/ HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:43 +0330] "GET /ff1.php?fm=true&edit=error_log.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8453 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:45 +0330] "GET /ff1.php?fm=true&edit=ff1.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8457 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:46 +0330] "GET /ff1.php?fm=true&edit=ff1.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:48 +0330] "GET /ff1.php?fm=true&edit=form.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8455 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:49 +0330] "GET /ff1.php?fm=true&edit=form.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8448 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:50 +0330] "GET /ff1.php?fm=true&edit=include.php.php.tar.gz&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8461 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:52 +0330] "GET /ff1.php?fm=true&edit=include.php.tar&path=/home/mehradh2/public_html/ HTTP/1.1" 200 8457 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:53 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/ HTTP/1.1" 200 11706 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:55 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/. HTTP/1.1" 200 11618 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:57 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.. HTTP/1.1" 200 9389 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:58 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cagefs HTTP/1.1" 200 9499 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:57:59 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cl.selector HTTP/1.1" 200 9499 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:01 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.clwpos HTTP/1.1" 200 9372 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:02 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cpanel HTTP/1.1" 200 10195 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:04 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.cphorde HTTP/1.1" 200 9645 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:05 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.htpasswds HTTP/1.1" 200 9118 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:07 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.koality HTTP/1.1" 200 9124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:08 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.razor HTTP/1.1" 200 9966 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:10 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.spamassassin HTTP/1.1" 200 9399 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:11 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/.trash HTTP/1.1" 200 9101 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:12 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/access-logs HTTP/1.1" 200 9560 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:14 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/etc HTTP/1.1" 200 9575 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:15 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/logs HTTP/1.1" 200 9675 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:17 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/lscache HTTP/1.1" 200 9112 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:18 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/mail HTTP/1.1" 200 11704 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:20 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_ftp HTTP/1.1" 200 9367 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:21 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html HTTP/1.1" 200 14690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:23 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 14628 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:26 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/ HTTP/1.1" 200 9449 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:27 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/. HTTP/1.1" 200 9402 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:29 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/.. HTTP/1.1" 200 14690 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:31 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/acme-challenge HTTP/1.1" 200 9124 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:32 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/. HTTP/1.1" 200 9105 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:34 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/.. HTTP/1.1" 200 14694 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:36 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/ssl HTTP/1.1" 200 9770 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:38 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/tmp HTTP/1.1" 200 9598 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:39 +0330] "GET /ff1.php?fm=true&rename=.spamassassin&path=/home/mehradh2/ HTTP/1.1" 200 8417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:41 +0330] "GET /ff1.php?fm=true&rename=.spamassassinboxenable&path=/home/mehradh2/ HTTP/1.1" 200 8425 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:42 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:44 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:45 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:47 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 14711 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:49 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 14711 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:51 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:52 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:54 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 14708 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:56 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:58:58 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:00 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:01 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 14710 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:03 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:06 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:08 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 14703 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:10 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:28 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 14705 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:30 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:32 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvdG1w HTTP/1.1" 200 14821 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:34 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLm15aW11bmlmeV9pZA== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:36 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfbG9nb3V0 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:37 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hfcHJvZmlsZQ== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:39 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmJhc2hyYw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:40 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmltdW5pZnlfcGF0Y2hfaWQ= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:42 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLmxhc3Rsb2dpbg== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:43 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmJveGVuYWJsZQ== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:45 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3NpbmVuYWJsZQ== HTTP/1.1" 200 6560 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:46 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNhZ2Vmcw== HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:48 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsLnNlbGVjdG9y HTTP/1.1" 200 14900 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:50 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNsd3Bvcw== HTTP/1.1" 200 14893 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:52 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwYW5lbA== HTTP/1.1" 200 14860 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:54 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmNwaG9yZGU= HTTP/1.1" 200 14947 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:56 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmh0cGFzc3dkcw== HTTP/1.1" 200 14822 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:59:59 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLmtvYWxpdHk= HTTP/1.1" 200 14827 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:01 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnJhem9y HTTP/1.1" 200 14829 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:03 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnNwYW1hc3Nhc3Npbg== HTTP/1.1" 200 14857 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:06 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvLnRyYXNo HTTP/1.1" 200 14825 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
188.253.116.146 - - [28/Feb/2026:06:00:08 +0330] "GET /ff1.php?fm=true&edit=index.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 9488 "http://mehradhospital.ir/ff1.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
147.135.253.34 - - [28/Feb/2026:06:00:08 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvYWNjZXNzLWxvZ3M= HTTP/1.1" 200 14963 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:10 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvZXRj HTTP/1.1" 200 14858 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:12 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbG9ncw== HTTP/1.1" 200 14803 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:14 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbHNjYWNoZQ== HTTP/1.1" 200 14825 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:17 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvbWFpbA== HTTP/1.1" 200 14918 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:19 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvc3Ns HTTP/1.1" 200 14951 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:21 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2Z0cA== HTTP/1.1" 200 14830 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:24 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWw= HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:20 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/. HTTP/1.1" 200 9396 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:21 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/.. HTTP/1.1" 200 14279 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:24 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/.well-known/acme-challenge HTTP/1.1" 200 9131 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:25 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/cgi-bin/. HTTP/1.1" 200 9110 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:27 +0330] "GET /ff1.php?fm=true&rename=mehradh2.rcube.db&path=/home/mehradh2/etc/ HTTP/1.1" 200 8421 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:28 +0330] "GET /ff1.php?fm=true&rename=mehradhospital.ir&path=/home/mehradh2/etc/ HTTP/1.1" 200 8413 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:29 +0330] "GET /ff1.php?fm=true&rights=mehradh2.rcube.db&path=/home/mehradh2/etc/ HTTP/1.1" 200 8427 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:31 +0330] "GET /ff1.php?fm=true&rights=mehradhospital.ir&path=/home/mehradh2/etc/ HTTP/1.1" 200 8454 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:33 +0330] "GET /ff1.php?gz=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGhvc3BpdGFsLmly HTTP/1.1" 200 14417 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:35 +0330] "GET /ff1.php?gzfile=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGgyLnJjdWJlLmRi HTTP/1.1" 200 14428 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:37 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvZXRjL21laHJhZGhvc3BpdGFsLmly HTTP/1.1" 200 14682 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:05:56:40 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvdG1w HTTP/1.1" 200 14821 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
188.253.116.146 - - [28/Feb/2026:06:00:22 +0330] "POST /ff1.php?fm=true&edit=index.php&path=/home/mehradh2/public_html/ HTTP/1.1" 200 10915 "http://mehradhospital.ir/ff1.php?fm=true&edit=index.php&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:06:00:31 +0330] "GET /123.php HTTP/1.1" 500 0 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
188.253.116.146 - - [28/Feb/2026:06:00:24 +0330] "GET /ff1.php?fm=true&path=/home/mehradh2/public_html/ HTTP/1.1" 200 16697 "http://mehradhospital.ir/ff1.php?fm=true&edit=index.php&path=/home/mehradh2/public_html/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
188.253.116.146 - - [28/Feb/2026:06:00:36 +0330] "GET /jp2023cww HTTP/1.1" 404 796 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
188.253.116.146 - - [28/Feb/2026:06:00:37 +0330] "GET /favicon.ico HTTP/1.1" 404 796 "http://mehradhospital.ir/jp2023cww" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
188.253.116.146 - - [28/Feb/2026:06:00:40 +0330] "GET /?jp2023cww HTTP/1.1" 200 57 "-" "http://www.google.com/bot.html Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
147.135.253.34 - - [28/Feb/2026:06:00:35 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvcHVibGljX2h0bWwvLndlbGwta25vd24vYWNtZS1jaGFsbGVuZ2U= HTTP/1.1" 200 14846 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:37 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvd3d3 HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
147.135.253.34 - - [28/Feb/2026:06:00:38 +0330] "GET /ff1.php?zip=L2hvbWUvbWVocmFkaDIvdG1w HTTP/1.1" 200 14842 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"