ROOTPLOIT
Server: Apache
System: Linux gator4320.hostgator.com 5.14.0-687.42.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Aug 27 11:55:12 EDT 2026 x86_64
User: uirftgte (2989)
PHP: 7.4.33
Disabled: NONE
$ pwd: /home1/uirftgte/access-logs/
Upload Files
File: /home1/uirftgte/access-logs/uir.ftg.temporary.site-ssl_log
162.241.194.173 - - [29/May/2024:04:33:12 -0500] "POST /wp-cron.php?doing_wp_cron=1716975192.7193698883056640625000 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
104.166.80.77 - - [29/May/2024:04:33:10 -0500] "GET / HTTP/1.1" 200 1178 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:04:33:15 -0500] "GET /wp-json/jetpack/v4/sync/spawn-sync?time=1716975195&request_lock_id=1716975195.3422 HTTP/1.1" 200 37 "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:05:05:53 -0500] "POST /wp-cron.php?doing_wp_cron=1716977153.3998548984527587890625 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:51 -0500] "GET / HTTP/1.1" 301 - "-" "-" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:53 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA756439) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2733.98 Mobile Safari/537.3" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:54 -0500] "GET /server HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:54 -0500] "GET /.vscode/sftp.json HTTP/1.1" 404 462 "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:54 -0500] "GET /about HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:54 -0500] "GET /debug/default/view?panel=config HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:55 -0500] "GET /v2/_catalog HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:55 -0500] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:55 -0500] "GET /server-status HTTP/1.1" 403 450 "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:55 -0500] "GET /login.action HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:55 -0500] "GET /_all_dbs HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.337313e2439313e2134323e2236313; +https://leakix.net)" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:56 -0500] "GET /.DS_Store HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:56 -0500] "GET /.env HTTP/1.1" 406 226 "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:56 -0500] "GET /.git/config HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:56 -0500] "GET /s/337313e2439313e2134323e2236313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:56 -0500] "GET /config.json HTTP/1.1" 404 462 "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:56 -0500] "GET /telescope/requests HTTP/1.1" 301 - "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
96.126.110.54 - - [29/May/2024:05:05:57 -0500] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 1831 "-" "Go-http-client/1.1" www.uir.ftg.temporary.site 162.241.194.173
104.166.80.194 - - [29/May/2024:05:32:09 -0500] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" cpcalendars.uir.ftg.temporary.site 162.241.194.173
104.166.80.40 - - [29/May/2024:05:32:52 -0500] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" cpcontacts.uir.ftg.temporary.site 162.241.194.173
104.166.80.228 - - [29/May/2024:05:32:54 -0500] "GET / HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" cpanel.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:05:32:56 -0500] "POST /wp-cron.php?doing_wp_cron=1716978776.3268399238586425781250 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
104.166.80.70 - - [29/May/2024:05:32:54 -0500] "GET / HTTP/1.1" 200 1178 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" mail.uir.ftg.temporary.site 162.241.194.173
104.166.80.8 - - [29/May/2024:05:33:20 -0500] "GET / HTTP/1.1" 401 52 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" webdisk.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:05:34:54 -0500] "POST /wp-cron.php?doing_wp_cron=1716978894.3723599910736083984375 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
104.166.80.98 - - [29/May/2024:05:34:54 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" www.uir.ftg.temporary.site 162.241.194.173
104.166.80.98 - - [29/May/2024:05:34:55 -0500] "GET / HTTP/1.1" 200 1178 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" uir.ftg.temporary.site 162.241.194.173
104.166.80.96 - - [29/May/2024:05:34:57 -0500] "GET / HTTP/1.1" 200 12097 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" webmail.uir.ftg.temporary.site 162.241.194.173
104.166.80.222 - - [29/May/2024:05:35:28 -0500] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" autodiscover.uir.ftg.temporary.site 162.241.194.173
103.102.228.130 - - [29/May/2024:05:44:39 -0500] "GET /.env HTTP/1.1" 401 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15; rv:83.0) Gecko/20100101 Firefox/83.0" webdisk.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:06:46:12 -0500] "POST /wp-cron.php?doing_wp_cron=1716983172.6086120605468750000000 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
45.148.10.232 - - [29/May/2024:06:46:10 -0500] "GET /phpinfo.php HTTP/1.1" 404 1178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" mail.uir.ftg.temporary.site 162.241.194.173
45.148.10.232 - - [29/May/2024:06:46:12 -0500] "GET /_profiler/phpinfo HTTP/1.1" 404 1178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" mail.uir.ftg.temporary.site 162.241.194.173
45.148.10.232 - - [29/May/2024:06:49:52 -0500] "GET /phpinfo.php HTTP/1.1" 401 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" webdisk.uir.ftg.temporary.site 162.241.194.173
45.148.10.232 - - [29/May/2024:06:49:52 -0500] "GET /_profiler/phpinfo HTTP/1.1" 401 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" webdisk.uir.ftg.temporary.site 162.241.194.173
103.102.228.130 - - [29/May/2024:06:51:58 -0500] "GET /.env HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.62" cpcalendars.uir.ftg.temporary.site 162.241.194.173
103.102.228.130 - - [29/May/2024:09:31:42 -0500] "GET /.env HTTP/1.1" 503 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:26.0) Gecko/20100101 Firefox/26.0" cpcontacts.uir.ftg.temporary.site 162.241.194.173
103.102.228.130 - - [29/May/2024:10:54:17 -0500] "GET /.env HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36" mail.uir.ftg.temporary.site 162.241.194.173
103.102.228.130 - - [29/May/2024:13:34:41 -0500] "GET /.env HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 Edg/112.0.1722.48" webmail.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:15:59:14 -0500] "POST /wp-cron.php?doing_wp_cron=1717016354.8199160099029541015625 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:11 -0500] "GET / HTTP/1.1" 200 2738 "-" "-" uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:15:59:15 -0500] "GET /wp-json/jetpack/v4/sync/spawn-sync?time=1717016355&request_lock_id=1717016355.8713 HTTP/1.1" 200 37 "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:17 -0500] "GET / HTTP/1.1" 200 2738 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA756439) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2733.98 Mobile Safari/537.3" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:18 -0500] "GET /server HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:18 -0500] "GET /.vscode/sftp.json HTTP/1.1" 404 462 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:18 -0500] "GET /about HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:19 -0500] "GET /debug/default/view?panel=config HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:20 -0500] "GET /v2/_catalog HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:20 -0500] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:21 -0500] "GET /server-status HTTP/1.1" 403 450 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:21 -0500] "GET /login.action HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:22 -0500] "GET /_all_dbs HTTP/1.1" 404 1178 "-" "Mozilla/5.0 (l9scan/2.0.337313e2439313e2134323e2236313; +https://leakix.net)" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:22 -0500] "GET /.DS_Store HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:23 -0500] "GET /.env HTTP/1.1" 406 226 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:23 -0500] "GET /.git/config HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:24 -0500] "GET /s/337313e2439313e2134323e2236313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:24 -0500] "GET /config.json HTTP/1.1" 404 462 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:25 -0500] "GET /telescope/requests HTTP/1.1" 404 1178 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
138.68.82.23 - - [29/May/2024:15:59:25 -0500] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 1831 "-" "Go-http-client/1.1" uir.ftg.temporary.site 162.241.194.173
104.166.80.98 - - [29/May/2024:17:19:35 -0500] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" autodiscover.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:17:20:05 -0500] "POST /wp-cron.php?doing_wp_cron=1717021205.4733159542083740234375 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
104.166.80.164 - - [29/May/2024:17:20:02 -0500] "GET / HTTP/1.1" 200 1178 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" mail.uir.ftg.temporary.site 162.241.194.173
104.166.80.13 - - [29/May/2024:17:21:23 -0500] "GET / HTTP/1.1" 401 52 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" webdisk.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:17:23:10 -0500] "POST /wp-cron.php?doing_wp_cron=1717021390.3023540973663330078125 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
104.166.80.211 - - [29/May/2024:17:23:08 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" www.uir.ftg.temporary.site 162.241.194.173
104.166.80.211 - - [29/May/2024:17:23:11 -0500] "GET / HTTP/1.1" 200 1178 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:17:23:38 -0500] "POST /wp-cron.php?doing_wp_cron=1717021418.3993000984191894531250 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
104.166.80.224 - - [29/May/2024:17:23:38 -0500] "GET / HTTP/1.1" 200 1178 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" uir.ftg.temporary.site 162.241.194.173
104.166.80.196 - - [29/May/2024:17:24:15 -0500] "GET / HTTP/1.1" 200 12092 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" cpanel.uir.ftg.temporary.site 162.241.194.173
104.166.80.92 - - [29/May/2024:17:24:48 -0500] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" cpcontacts.uir.ftg.temporary.site 162.241.194.173
104.166.80.23 - - [29/May/2024:17:25:20 -0500] "GET / HTTP/1.1" 200 12101 "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" webmail.uir.ftg.temporary.site 162.241.194.173
104.166.80.164 - - [29/May/2024:17:25:41 -0500] "GET / HTTP/1.1" 503 - "-" "Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0" cpcalendars.uir.ftg.temporary.site 162.241.194.173
162.241.194.173 - - [29/May/2024:21:30:47 -0500] "POST /wp-cron.php?doing_wp_cron=1717036247.3723120689392089843750 HTTP/1.1" 200 - "-" "WordPress/6.5.3; https://uir.ftg.temporary.site" uir.ftg.temporary.site 162.241.194.173
163.5.210.79 - - [29/May/2024:21:30:43 -0500] "GET /.git/config HTTP/1.1" 404 1178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" uir.ftg.temporary.site 162.241.194.173
45.148.10.232 - - [29/May/2024:21:41:46 -0500] "GET /phpinfo.php HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" cpcontacts.uir.ftg.temporary.site 162.241.194.173
45.148.10.232 - - [29/May/2024:21:41:46 -0500] "GET /_profiler/phpinfo HTTP/1.1" 503 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" cpcontacts.uir.ftg.temporary.site 162.241.194.173
163.5.210.79 - - [29/May/2024:21:57:30 -0500] "GET /.git/config HTTP/1.1" 400 52 "-" "Mozilla/5.0 (X11; Linux) KHTML/4.9.1 (like Gecko) Konqueror/4.9" autodiscover.uir.ftg.temporary.site 162.241.194.173
163.5.210.79 - - [29/May/2024:22:38:30 -0500] "GET /.git/config HTTP/1.1" 200 12107 "-" "Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Nokia5700/3.27; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, like Gecko) Safari/413" cpanel.uir.ftg.temporary.site 162.241.194.173
163.5.210.79 - - [30/May/2024:02:14:14 -0500] "GET /.git/config HTTP/1.1" 400 52 "-" "Mozilla/5.0 (iPad; CPU OS 15_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Mobile/15E148 Safari/604.1" autodiscover.uir.ftg.temporary.site 162.241.194.173
163.5.210.79 - - [30/May/2024:02:46:35 -0500] "GET /.git/config HTTP/1.1" 200 12111 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.27 (KHTML, like Gecko) Chrome/12.0.712.0 Safari/534.27" cpanel.uir.ftg.temporary.site 162.241.194.173
@ Telegram