rahcos.com - Iwafut Security

upload mass deface mass delete console info server
name : rahcos.com
35.243.179.139 - - [28/Jul/2026:18:10:28 +0530] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
35.243.179.139 - - [28/Jul/2026:18:10:23 +0530] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
43.135.134.127 - - [28/Jul/2026:18:10:59 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.166.224.244 - - [28/Jul/2026:19:06:20 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
213.159.214.145 - - [28/Jul/2026:19:07:33 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
42.83.147.54 - - [28/Jul/2026:20:05:00 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36"
66.249.66.32 - - [28/Jul/2026:21:24:22 +0530] "GET / HTTP/1.1" 301 795 "-" "GoogleOther"
216.24.212.171 - - [28/Jul/2026:22:07:59 +0530] "GET // HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
216.24.212.171 - - [28/Jul/2026:22:08:01 +0530] "POST //wp-json/batch/v1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
216.24.212.171 - - [28/Jul/2026:22:08:02 +0530] "POST //?rest_route=/batch/v1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
18.224.51.251 - - [28/Jul/2026:23:10:03 +0530] "GET /iwafut.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.20.232.164 - - [28/Jul/2026:23:10:04 +0530] "GET /x0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.22.42.238 - - [28/Jul/2026:23:11:09 +0530] "GET /wp-content/anjv6.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:11:19 +0530] "GET /wp-content/imunify-security/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:10:02 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
3.129.26.165 - - [28/Jul/2026:23:10:03 +0530] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.19.142.168 - - [28/Jul/2026:23:10:03 +0530] "GET /utchiha_7qVHBtcr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.19.31.78 - - [28/Jul/2026:23:10:04 +0530] "GET /poc.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:11:07 +0530] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
3.19.60.19 - - [28/Jul/2026:23:11:09 +0530] "GET /wp-content/utchiha_7qVHBtcr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
43.166.128.86 - - [28/Jul/2026:23:22:21 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
82.156.34.74 - - [28/Jul/2026:23:56:54 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
172.236.145.72 - - [29/Jul/2026:00:40:38 +0530] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
124.156.225.181 - - [29/Jul/2026:00:59:40 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
18.226.64.131 - - [29/Jul/2026:01:41:25 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
107.150.37.82 - - [29/Jul/2026:02:09:44 +0530] "GET /wp-content/install.php HTTP/1.1" 301 795 "http://rahcos.com/wp-content/install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
74.7.242.62 - - [29/Jul/2026:02:38:47 +0530] "GET / HTTP/1.1" 301 795 "http://www.taxies.biz" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.175.157 - - [29/Jul/2026:02:34:11 +0530] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
66.249.66.67 - - [29/Jul/2026:03:21:52 +0530] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:23 +0530] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:23 +0530] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
Iwafut Security Shell
