HEX
Server: Apache
System: Linux clpupre 5.4.0-90-generic #101-Ubuntu SMP Fri Oct 15 20:00:55 UTC 2021 x86_64
User: undanet (1000)
PHP: 7.4.3
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /proc/thread-self/root/proc/thread-self/root/proc/thread-self/root/proc/thread-self/root/dev/fd/
Upload Files
File: //proc/thread-self/root/proc/thread-self/root/proc/thread-self/root/proc/thread-self/root/dev/fd/12
147.185.132.85 - - [30/Jun/2026:00:05:18 +0200] "GET /api/jolokia/version HTTP/1.1" 404 5670 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
205.210.31.199 - - [30/Jun/2026:00:42:36 +0200] "GET /actuator/jolokia/version HTTP/1.1" 404 5670 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
176.65.139.233 - - [30/Jun/2026:01:24:37 +0200] "GET / HTTP/1.1" 200 26458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
100.51.194.111 - - [30/Jun/2026:02:48:19 +0200] "GET / HTTP/1.1" 301 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
3.217.128.115 - - [30/Jun/2026:02:48:19 +0200] "GET / HTTP/1.1" 200 11595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
95.133.253.196 - - [30/Jun/2026:03:18:19 +0200] "GET /.git/config HTTP/1.1" 404 5689 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
198.235.24.46 - - [30/Jun/2026:04:43:54 +0200] "GET /jolokia/exec HTTP/1.1" 404 5670 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
198.235.24.35 - - [30/Jun/2026:09:02:03 +0200] "GET / HTTP/1.1" 301 469 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
198.235.24.35 - - [30/Jun/2026:09:02:04 +0200] "GET / HTTP/1.1" 200 26439 "http://portalempleoclpudb.proyectosundanet.com/" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
206.81.6.235 - - [30/Jun/2026:10:43:56 +0200] "GET /wp-admin/ HTTP/1.1" 301 543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:44:38 +0200] "GET /wp-admin/maint/ HTTP/1.1" 301 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:44:59 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:45:12 +0200] "GET /wp-admin/images/ HTTP/1.1" 301 557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:45:15 +0200] "GET /wp-admin/network/ HTTP/1.1" 301 558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:45:45 +0200] "GET /wp-includes/Text/ HTTP/1.1" 301 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:46:08 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:46:34 +0200] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:46:53 +0200] "GET /wp-includes/IXR/ HTTP/1.1" 301 557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:46:58 +0200] "GET /wp-includes/images/ HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:47:06 +0200] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:47:40 +0200] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:48:09 +0200] "GET /wp-includes/widgets/ HTTP/1.1" 301 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:48:54 +0200] "GET /wp-content/uploads/ HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:49:00 +0200] "GET /wp-content/upgrade/ HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:49:18 +0200] "GET /wp-content/themes/ HTTP/1.1" 301 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:49:22 +0200] "GET /.well-known/ HTTP/1.1" 301 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:49:36 +0200] "GET /files/ HTTP/1.1" 301 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:49:49 +0200] "GET /file/ HTTP/1.1" 301 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:49:51 +0200] "GET /images/ HTTP/1.1" 301 539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
206.81.6.235 - - [30/Jun/2026:10:50:26 +0200] "GET /.tmb/ HTTP/1.1" 301 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
@ Telegram