ROOTPLOIT
Server: Apache
System: Linux gator4320.hostgator.com 5.14.0-687.42.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Aug 27 11:55:12 EDT 2026 x86_64
User: uirftgte (2989)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /home1/uirftgte/access-logs/masarmedical.com.qa
43.159.128.247 - - [01/Nov/2026:06:10:55 -0600] "GET /?path=/home1/uirftgte/public_html/masarmedical/.well-known/acme-challenge HTTP/1.1" 200 3230 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
169.40.142.133 - - [01/Nov/2026:06:13:29 -0600] "GET /api/session/properties HTTP/1.1" 200 12106 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" masarmedical.com.qa 10.57.21.198
43.155.157.239 - - [01/Nov/2026:06:20:29 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-content/ai1wm-backups/index.php&path=/home1/uirftgte/public_html/wp-content/ai1wm-backups HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
150.109.119.38 - - [01/Nov/2026:06:32:36 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-content/ai1wm-backups/.htaccess&path=/home1/uirftgte/public_html/wp-content/ai1wm-backups HTTP/1.1" 200 3291 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.153.96.79 - - [01/Nov/2026:06:41:04 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-content/ai1wm-backups/web.config&path=/home1/uirftgte/public_html/wp-content/ai1wm-backups HTTP/1.1" 406 226 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
10.57.21.198 - - [01/Nov/2026:06:45:58 -0600] "GET /.well-known/acme-challenge/LDMPGGJAPYNG-F06LWC5GSTGA23IWDW9 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" masarmedical.com.qa 10.57.21.198
10.57.21.198 - - [01/Nov/2026:06:45:58 -0600] "GET /.well-known/acme-challenge/114HPCJVC5THHHZPS72K7SJEYS1XN5M0 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" www.masarmedical.com.qa 10.57.21.198
34.72.175.219 - - [01/Nov/2026:06:59:08 -0600] "GET / HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" masarmedical.com.qa 10.57.21.198
104.131.107.44 - - [01/Nov/2026:07:29:36 -0600] "GET / HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" www.masarmedical.com.qa 10.57.21.198
104.131.107.44 - - [01/Nov/2026:07:29:36 -0600] "GET /favicon.ico HTTP/1.1" 200 12106 "http://www.masarmedical.com.qa/" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" www.masarmedical.com.qa 10.57.21.198
43.164.190.28 - - [01/Nov/2026:08:08:23 -0600] "GET / HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" masarmedical.com.qa 10.57.21.198
190.92.245.76 - - [01/Nov/2026:08:26:48 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
110.238.108.132 - - [01/Nov/2026:08:26:48 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
13.214.129.4 - - [01/Nov/2026:08:26:48 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
149.232.131.171 - - [01/Nov/2026:08:26:48 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
1.92.194.17 - - [01/Nov/2026:08:54:14 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
180.153.197.137 - - [01/Nov/2026:08:54:14 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
42.193.108.119 - - [01/Nov/2026:08:54:14 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
140.206.235.58 - - [01/Nov/2026:08:54:15 -0600] "GET /robots.txt HTTP/1.1" 200 57296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
43.166.226.57 - - [01/Nov/2026:09:17:03 -0600] "GET / HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
170.106.152.218 - - [01/Nov/2026:09:17:53 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-comments-post.php&path=/home1/uirftgte/public_html HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.155.162.41 - - [01/Nov/2026:09:29:20 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-settings.php&path=/home1/uirftgte/public_html HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.159.141.150 - - [01/Nov/2026:09:38:06 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-blog-header.php&path=/home1/uirftgte/public_html HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.131.253.14 - - [01/Nov/2026:09:50:45 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-load.php&path=/home1/uirftgte/public_html HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
173.239.240.146 - - [01/Nov/2026:09:55:43 -0600] "GET /wp-login.php HTTP/1.1" 409 83 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" masarmedical.com.qa 10.57.21.198
43.161.217.205 - - [01/Nov/2026:10:00:36 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-config.php&path=/home1/uirftgte/public_html HTTP/1.1" 406 226 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.157.153.236 - - [01/Nov/2026:10:08:38 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-links-opml.php&path=/home1/uirftgte/public_html HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
170.106.35.137 - - [01/Nov/2026:10:21:26 -0600] "GET /?path=/home1/uirftgte/public_html/wp-admin HTTP/1.1" 200 32249 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
114.119.155.205 - - [01/Nov/2026:10:29:23 -0600] "GET /author/masara2z HTTP/1.1" 406 226 "https://masarmedical.com.qa/news1/" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" masarmedical.com.qa 10.57.21.198
43.131.253.14 - - [01/Nov/2026:10:31:18 -0600] "GET /?path=/home1/uirftgte/public_html/wp-admin/maint HTTP/1.1" 200 3563 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
36.77.210.202 - - [01/Nov/2026:10:36:54 -0600] "GET /api/session/properties HTTP/1.1" 200 12106 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" www.masarmedical.com.qa 10.57.21.198
43.135.36.201 - - [01/Nov/2026:10:40:53 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-admin/freedoms.php&path=/home1/uirftgte/public_html/wp-admin HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.153.123.4 - - [01/Nov/2026:10:48:40 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-admin/media.php&path=/home1/uirftgte/public_html/wp-admin HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.131.36.84 - - [01/Nov/2026:11:00:48 -0600] "GET /?path=/home1/uirftgte/public_html/wp-admin/css HTTP/1.1" 200 33358 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
43.130.139.177 - - [01/Nov/2026:11:12:20 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-admin/admin-header.php&path=/home1/uirftgte/public_html/wp-admin HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
149.30.230.211 - - [01/Nov/2026:11:12:33 -0600] "GET / HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" www.masarmedical.com.qa 10.57.21.198
149.30.230.211 - - [01/Nov/2026:11:12:33 -0600] "GET / HTTP/1.1" 200 12106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" masarmedical.com.qa 10.57.21.198
43.164.196.244 - - [01/Nov/2026:11:20:27 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-admin/edit-form-advanced.php&path=/home1/uirftgte/public_html/wp-admin HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
205.210.31.231 - - [01/Nov/2026:11:21:36 -0600] "GET / HTTP/1.1" 200 57296 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" masarmedical.com.qa 10.57.21.198
49.51.253.26 - - [01/Nov/2026:11:30:47 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-admin/maint/repair.php&path=/home1/uirftgte/public_html/wp-admin/maint HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
114.119.136.109 - - [01/Nov/2026:11:36:02 -0600] "GET /2017/ HTTP/1.1" 406 226 "http://masarmedical.com.qa/2017/06/20/" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" masarmedical.com.qa 10.57.21.198
43.159.34.167 - - [01/Nov/2026:11:41:20 -0600] "GET /?fileloc=/home1/uirftgte/public_html/wp-admin/css/code-editor-rtl.min.css&path=/home1/uirftgte/public_html/wp-admin/css HTTP/1.1" 200 3656 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:25 -0600] "HEAD /backup HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:25 -0600] "HEAD /old HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:25 -0600] "HEAD /bc HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:25 -0600] "HEAD /wordpress HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:25 -0600] "HEAD /wp HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:25 -0600] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:26 -0600] "HEAD /new HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:26 -0600] "HEAD /bk HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" masarmedical.com.qa 10.57.21.198
172.235.146.238 - - [01/Nov/2026:11:42:26 -0600] "HEAD /main HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" masarmedical.com.qa 10.57.21.198