Suspected of having performed illicit activity on AMS server.
Web App Attack
Anonymous
Attempt to run shell script:
72.14.188.64 - - [21/Sep/2023:16:56:57 +0100] "GET /shell.php HT ... show moreAttempt to run shell script:
72.14.188.64 - - [21/Sep/2023:16:56:57 +0100] "GET /shell.php HTTP/1.1" 200 234 "-" "Mozilla/5.0 (iPad; CPU OS 12_4_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604" show less
\[Thu Sep 21 08:17:14.822316 2023\] \[php7:error\] \[pid 25368\] \[client 72.14.188.64:44072\] scrip ... show more\[Thu Sep 21 08:17:14.822316 2023\] \[php7:error\] \[pid 25368\] \[client 72.14.188.64:44072\] script \'/var/www/pwhermes.com/public_html/atomlib.php\' not found or unable to stat
\[Thu Sep 21 08:17:14.824437 2023\] \[php7:error\] \[pid 25509\] \[client 72.14.188.64:44088\] script \'/var/www/pwhermes.com/public_html/ninja.php\' not found or unable to stat
\[Thu Sep 21 08:17:14.825130 2023\] \[php7:error\] \[pid 25510\] \[client 72.14.188.64:44100\] script \'/var/www/pwhermes.com/public_html/shell.php\' not found or unable to stat
\[Thu Sep 21 08:17:14.826010 2023\] \[php7:error\] \[pid 25369\] \[client 72.14.188.64:44106\] script \'/var/www/pwhermes.com/public_html/simple.php\' not found or unable to stat
... show less
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 72.14.188.64 (US/United ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 72.14.188.64 (US/United States/li54-64.members.linode.com) show less