Thank you for reply @wfpeter !
But i have another question in that case, for example i got the same /?constructor=f2a7ee request from the ip of ‘52.230.152.60’ for example. If i turn it off, probably its gonna be risky for me. The interesting point is my wordpress version is not less than 5.9.2 but its still blocking with that reason.
And when i check ‘52.230.152.60’ on dnslookup in mx for example, i can clearly see that it belongs to microsoft. What to do then?