HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
$ pwd: /proc/thread-self/root/proc/self/root/home/awaldron/access-logs/
Upload Files
File: //proc/thread-self/root/proc/self/root/home/awaldron/access-logs/pennhillscdccom.alanwaldron.com
68.155.156.252 - - [17/Aug/2026:08:59:04 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:08:59:05 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:08:59:07 -0400] "GET /4PJcpMFsD8B.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:08:59:35 -0400] "GET /xx.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:08:59:53 -0400] "GET //av.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:06 -0400] "GET /media.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:20 -0400] "GET /images.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:21 -0400] "GET /mac.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:21 -0400] "GET /ops.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:23 -0400] "GET /coffexium.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:24 -0400] "GET /BDKR28WP.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:24 -0400] "GET /sf.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:25 -0400] "GET /k.php?p= HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:25 -0400] "GET /82.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:27 -0400] "GET /dex.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:28 -0400] "GET /puc.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:29 -0400] "GET /inso.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:29 -0400] "GET //aa.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:30 -0400] "GET /1.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:31 -0400] "GET /img.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:31 -0400] "GET /kir.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:32 -0400] "GET /222.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:34 -0400] "GET /key.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:35 -0400] "GET /chosen.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:36 -0400] "GET /thoms.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:36 -0400] "GET ///wpxml.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:38 -0400] "GET /file1221.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:39 -0400] "GET /nox.php HTTP/1.1" 302 - "-" "-"
68.155.156.252 - - [17/Aug/2026:09:00:40 -0400] "GET /akismet.php HTTP/1.1" 302 - "-" "-"
198.235.24.57 - - [17/Aug/2026:09:03:45 -0400] "GET / HTTP/1.1" 302 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
204.16.243.9 - - [17/Aug/2026:10:16:05 -0400] "GET /.well-known/acme-challenge/_SO2FKHS9OR-Z3L1FKNYRPA46JMH3C_T HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
204.16.243.9 - - [17/Aug/2026:10:16:05 -0400] "GET /.well-known/acme-challenge/CK4EB_3-S1HRJBZDCE4-Y6ZY12QEQRBR HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
199.45.154.68 - - [17/Aug/2026:11:42:53 -0400] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
20.24.67.246 - - [17/Aug/2026:13:08:53 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:08:56 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:08:57 -0400] "GET //aa.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:08:58 -0400] "GET //av.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:08:59 -0400] "GET /media.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:00 -0400] "GET /images.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:01 -0400] "GET /admin.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:02 -0400] "GET /222.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:03 -0400] "GET /mac.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:04 -0400] "GET /ops.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:05 -0400] "GET /8.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:06 -0400] "GET /biufile.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:08 -0400] "GET /coffexium.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:09 -0400] "GET /1.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:10 -0400] "GET /coffee.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:11 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:12 -0400] "GET /wp-ws68.php?p= HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:14 -0400] "GET /yj09.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:15 -0400] "GET /scxy.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:16 -0400] "GET /3PJcpMFsD8B.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:17 -0400] "GET /BDKR28WP.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:19 -0400] "GET /4PJcpMFsD8B.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:20 -0400] "GET /1xmomo.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:21 -0400] "GET /blurbs.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:22 -0400] "GET /bajah.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:23 -0400] "GET /domvf.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:24 -0400] "GET /fpwch.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:25 -0400] "GET /sf.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:26 -0400] "GET /xx.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:27 -0400] "GET /adminner.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:28 -0400] "GET /wp-content/uploads/ HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:29 -0400] "GET //abcd.php HTTP/1.1" 302 - "-" "-"
20.24.67.246 - - [17/Aug/2026:13:09:30 -0400] "GET ///wpxml.php HTTP/1.1" 302 - "-" "-"
204.16.243.9 - - [17/Aug/2026:13:16:04 -0400] "GET /.well-known/acme-challenge/-A2-FTIOPDYXW2EYV3CGDEEHHFUCC4MG HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
204.16.243.9 - - [17/Aug/2026:13:16:04 -0400] "GET /.well-known/acme-challenge/0PH7-SG4S6462GAU1IUS43GHOC_1_QW8 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
204.16.243.9 - - [17/Aug/2026:16:16:04 -0400] "GET /.well-known/acme-challenge/SJAPP8F0HOZ--5V3PVV08P8TFW7KEDSA HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
204.16.243.9 - - [17/Aug/2026:16:16:04 -0400] "GET /.well-known/acme-challenge/V1DRTVZ4RPOL1HURVZ2Q1OQV72YK2IIJ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
@ Telegram