HEX
Server: Apache
System: Linux ruweb06.doruk.net.tr 6.8.0-79-generic #79-Ubuntu SMP PREEMPT_DYNAMIC Tue Aug 12 14:42:46 UTC 2025 x86_64
User: ilgazhavalandirma.com_lfvghapcl4 (11494)
PHP: 7.4.33
Disabled: opcache_get_status
$ pwd: /var/www/vhosts/ilgazhavalandirma.com.tr/logs/
Upload Files
File: /var/www/vhosts/ilgazhavalandirma.com.tr/logs/access_log
167.71.214.74 - - [20/Oct/2025:07:06:09 +0300] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0"
185.244.208.136 - - [20/Oct/2025:07:10:27 +0300] "GET /wp-login.php HTTP/1.1" 301 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36"
185.244.208.136 - - [20/Oct/2025:07:10:40 +0300] "GET /wp-login.php HTTP/1.1" 301 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36"
185.244.208.136 - - [20/Oct/2025:07:10:55 +0300] "GET /wp-login.php HTTP/1.1" 301 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36"
173.208.148.34 - - [20/Oct/2025:07:20:46 +0300] "GET /index.php?params=1 HTTP/1.1" 301 605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36"
193.19.207.101 - - [20/Oct/2025:07:43:07 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.19.207.101 - - [20/Oct/2025:07:43:12 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
193.19.207.101 - - [20/Oct/2025:07:43:12 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.62.121.52 - - [20/Oct/2025:07:52:05 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.62.121.52 - - [20/Oct/2025:07:52:06 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.62.121.52 - - [20/Oct/2025:07:52:08 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
91.210.0.28 - - [20/Oct/2025:07:56:19 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36"
91.210.0.28 - - [20/Oct/2025:07:56:19 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36"
92.62.121.52 - - [20/Oct/2025:07:58:49 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.62.121.52 - - [20/Oct/2025:07:58:51 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
92.62.121.52 - - [20/Oct/2025:07:58:52 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
159.65.11.253 - - [20/Oct/2025:07:59:06 +0300] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 9 Pro Build/SKQ1.211019.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/126.0.6478.71 Mobile Safari/537.36"
103.179.173.163 - - [20/Oct/2025:07:59:35 +0300] "HEAD / HTTP/1.1" 301 233 "https://ilgazhavalandirma.com.tr/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
185.196.0.24 - - [20/Oct/2025:08:07:37 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
185.196.0.24 - - [20/Oct/2025:08:07:42 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
185.196.0.24 - - [20/Oct/2025:08:07:44 +0300] "GET /feed/ HTTP/1.1" 301 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
106.0.52.139 - - [20/Oct/2025:08:10:03 +0300] "POST /wp-login.php HTTP/1.1" 301 593 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
185.241.208.111 - - [20/Oct/2025:08:10:46 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
185.241.208.111 - - [20/Oct/2025:08:10:46 +0300] "POST /wp-plain.php HTTP/1.1" 301 593 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
185.241.208.111 - - [20/Oct/2025:08:10:46 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
185.241.208.111 - - [20/Oct/2025:08:10:46 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 639 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
194.35.122.218 - - [20/Oct/2025:08:18:28 +0300] "POST /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
216.244.66.233 - - [20/Oct/2025:08:56:36 +0300] "GET /robots.txt HTTP/1.1" 301 533 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
95.161.141.11 - - [20/Oct/2025:08:57:17 +0300] "GET /mah.php HTTP/1.1" 301 527 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
95.161.141.11 - - [20/Oct/2025:08:57:17 +0300] "GET /chosen.php HTTP/1.1" 301 533 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
95.161.141.11 - - [20/Oct/2025:08:57:18 +0300] "GET /goods.php HTTP/1.1" 301 531 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
185.196.0.19 - - [20/Oct/2025:08:58:10 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.196.0.19 - - [20/Oct/2025:08:58:11 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.196.0.19 - - [20/Oct/2025:08:58:12 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.80.158.167 - - [20/Oct/2025:09:02:48 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0"
185.196.0.19 - - [20/Oct/2025:09:04:24 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.196.0.19 - - [20/Oct/2025:09:04:25 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
185.196.0.19 - - [20/Oct/2025:09:04:26 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
173.208.148.34 - - [20/Oct/2025:09:10:21 +0300] "GET /index.php?params=1 HTTP/1.1" 301 605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.106 Safari/537.36"
48.210.227.143 - - [20/Oct/2025:09:24:01 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
173.252.87.13 - - [20/Oct/2025:09:29:35 +0300] "GET /robots.txt HTTP/1.1" 301 601 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
216.244.66.233 - - [20/Oct/2025:09:44:50 +0300] "GET /robots.txt HTTP/1.1" 301 533 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
64.227.131.13 - - [20/Oct/2025:09:53:46 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 595 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
34.143.185.12 - - [20/Oct/2025:10:12:17 +0300] "GET / HTTP/1.1" 301 513 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F)"
34.143.185.12 - - [20/Oct/2025:10:12:19 +0300] "GET /wordpress/ HTTP/1.1" 301 533 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F)"
177.75.23.159 - - [20/Oct/2025:10:17:53 +0300] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 301 635 "-" "-"
157.20.32.131 - - [20/Oct/2025:10:18:44 +0300] "POST /wp-login.php HTTP/1.1" 301 593 "http://ilgazhavalandirma.com.tr/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
177.75.23.159 - - [20/Oct/2025:10:19:10 +0300] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 301 579 "-" "-"
125.163.59.70 - - [20/Oct/2025:10:30:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.251.6.64 - - [20/Oct/2025:11:06:34 +0300] "GET /wp-login.php HTTP/1.1" 301 593 "-" "python-requests/2.31.0"
45.251.6.64 - - [20/Oct/2025:11:06:43 +0300] "POST /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0"
192.159.99.83 - - [20/Oct/2025:11:12:16 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
192.159.99.83 - - [20/Oct/2025:11:12:16 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 639 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
192.159.99.83 - - [20/Oct/2025:11:12:16 +0300] "GET / HTTP/1.1" 301 569 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
192.159.99.83 - - [20/Oct/2025:11:12:16 +0300] "POST /wp-plain.php HTTP/1.1" 301 593 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
216.244.66.233 - - [20/Oct/2025:11:21:11 +0300] "GET /robots.txt HTTP/1.1" 301 533 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
103.56.84.22 - - [20/Oct/2025:11:26:02 +0300] "GET /wp-login.php HTTP/1.1" 301 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36"
77.81.101.43 - - [20/Oct/2025:11:26:13 +0300] "POST /wp-login.php HTTP/1.1" 301 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36"
216.24.219.182 - - [20/Oct/2025:11:43:55 +0300] "GET /shell20250630.php HTTP/1.1" 301 547 "-" "Go-http-client/1.1"
216.24.219.182 - - [20/Oct/2025:11:43:56 +0300] "GET /wp-content/shell20250630.php HTTP/1.1" 301 569 "-" "Go-http-client/1.1"
193.36.224.141 - - [20/Oct/2025:11:43:58 +0300] "GET /wp-content/themes/shell20250630.php HTTP/1.1" 301 583 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:00 +0300] "GET /wp-admin/shell20250630.php HTTP/1.1" 301 565 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:00 +0300] "GET /wp-includes/shell20250630.php HTTP/1.1" 301 571 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:01 +0300] "GET /wpssl.php HTTP/1.1" 301 531 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:01 +0300] "GET /sid.php HTTP/1.1" 301 527 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:02 +0300] "GET /indekss.php HTTP/1.1" 301 535 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:02 +0300] "GET /axy99.php HTTP/1.1" 301 531 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:03 +0300] "GET /ERY.php HTTP/1.1" 301 527 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:03 +0300] "GET /wxz.php HTTP/1.1" 301 527 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:04 +0300] "GET /ab.php HTTP/1.1" 301 525 "-" "Go-http-client/1.1"
193.36.224.154 - - [20/Oct/2025:11:44:04 +0300] "GET /millo.php HTTP/1.1" 301 531 "-" "Go-http-client/1.1"
193.36.224.141 - - [20/Oct/2025:11:44:07 +0300] "GET /goldu.php HTTP/1.1" 301 531 "-" "Go-http-client/1.1"
193.36.224.179 - - [20/Oct/2025:11:44:14 +0300] "GET /wp-good.php HTTP/1.1" 301 535 "-" "Go-http-client/1.1"
193.36.224.141 - - [20/Oct/2025:11:44:27 +0300] "GET /witm.php HTTP/1.1" 301 529 "-" "Go-http-client/1.1"
167.71.222.132 - - [20/Oct/2025:11:49:28 +0300] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0"
192.159.99.83 - - [20/Oct/2025:11:55:07 +0300] "POST /wp-plain.php HTTP/1.1" 301 593 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
192.159.99.83 - - [20/Oct/2025:11:55:07 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 639 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
177.75.23.159 - - [20/Oct/2025:12:02:19 +0300] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 301 635 "-" "-"
216.244.66.233 - - [20/Oct/2025:12:08:46 +0300] "GET /robots.txt HTTP/1.1" 301 533 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)"
104.28.218.135 - - [20/Oct/2025:12:22:19 +0300] "POST /xmlrpc.php HTTP/1.1" 301 533 "-" "Python-xmlrpc/3.12"
36.41.75.167 - - [20/Oct/2025:12:37:05 +0300] "GET / HTTP/1.1" 301 544 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
104.28.247.132 - - [20/Oct/2025:12:43:54 +0300] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0"
104.28.247.132 - - [20/Oct/2025:12:44:03 +0300] "POST /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0"
@ Telegram