shell bypass 403

Iwafut Security Shell

: /home/rahcos/access-logs/ [ drwxr-x--- ]
upload mass deface mass delete console info server

name : rahcos.com-ssl_log
74.208.188.93 - - [28/Jul/2026:17:45:51 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
43.135.134.127 - - [28/Jul/2026:18:11:00 +0530] "GET / HTTP/1.1" 200 1232 "http://rahcos.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
20.57.16.117 - - [28/Jul/2026:18:02:54 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0"
35.243.179.139 - - [28/Jul/2026:18:10:26 +0530] "GET /media/system/js/core.js HTTP/2" 404 796 "http://rahcos.com/media/system/js/core.js" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
35.243.179.139 - - [28/Jul/2026:18:10:29 +0530] "GET /wp-includes/js/jquery/jquery.js HTTP/2" 404 796 "http://rahcos.com/wp-includes/js/jquery/jquery.js" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
109.161.166.54 - - [28/Jul/2026:18:11:55 +0530] "GET / HTTP/1.1" 200 1232 "-" "Python/3.12 aiohttp/3.13.5"
141.226.89.187 - - [28/Jul/2026:18:14:02 +0530] "GET /wp-includes/assets/264/ HTTP/2" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0"
141.226.89.187 - - [28/Jul/2026:18:14:02 +0530] "GET /apple-touch-icon-precomposed.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
141.226.89.187 - - [28/Jul/2026:18:14:02 +0530] "GET /apple-touch-icon.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
141.226.89.187 - - [28/Jul/2026:18:14:02 +0530] "GET /favicon.ico HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
148.251.46.181 - - [28/Jul/2026:18:15:46 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
51.68.111.239 - - [28/Jul/2026:18:32:52 +0530] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)"
51.68.111.239 - - [28/Jul/2026:18:32:52 +0530] "GET / HTTP/1.1" 200 1050 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)"
209.222.98.158 - - [28/Jul/2026:18:39:29 +0530] "GET / HTTP/1.1" 200 1232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
43.166.224.244 - - [28/Jul/2026:19:06:23 +0530] "GET / HTTP/1.1" 200 1236 "http://www.rahcos.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
5.29.219.76 - - [28/Jul/2026:19:08:01 +0530] "GET /apple-touch-icon-precomposed.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
5.29.219.76 - - [28/Jul/2026:19:08:02 +0530] "GET /apple-touch-icon.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
5.29.219.76 - - [28/Jul/2026:19:08:02 +0530] "GET /favicon.ico HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
213.180.203.5 - - [28/Jul/2026:19:09:52 +0530] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
213.159.214.145 - - [28/Jul/2026:19:07:34 +0530] "GET / HTTP/2" 200 1050 "http://RAHCOS.COM" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
5.29.219.76 - - [28/Jul/2026:19:08:02 +0530] "GET /wp-includes/assets/264/ HTTP/2" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0"
95.108.213.195 - - [28/Jul/2026:19:09:53 +0530] "GET /shopdetail/162161250 HTTP/2" 404 796 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
161.115.239.204 - - [28/Jul/2026:19:51:22 +0530] "GET / HTTP/2" 200 1050 "https://www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30"
91.217.51.139 - - [28/Jul/2026:19:51:24 +0530] "GET /wp-includes/assets/264/ HTTP/2" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0"
91.217.51.139 - - [28/Jul/2026:19:51:24 +0530] "GET /apple-touch-icon-precomposed.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
91.217.51.139 - - [28/Jul/2026:19:51:24 +0530] "GET /apple-touch-icon.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
91.217.51.139 - - [28/Jul/2026:19:51:24 +0530] "GET /favicon.ico HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
79.181.153.254 - - [28/Jul/2026:19:59:30 +0530] "GET /wp-includes/assets/264/ HTTP/2" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0"
79.181.153.254 - - [28/Jul/2026:19:59:30 +0530] "GET /apple-touch-icon-precomposed.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
79.181.153.254 - - [28/Jul/2026:19:59:30 +0530] "GET /apple-touch-icon.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
79.181.153.254 - - [28/Jul/2026:19:59:30 +0530] "GET /favicon.ico HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
42.83.147.54 - - [28/Jul/2026:20:05:02 +0530] "GET / HTTP/1.1" 200 1232 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36"
144.126.234.20 - - [28/Jul/2026:20:35:37 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0"
66.249.66.40 - - [28/Jul/2026:21:24:24 +0530] "GET / HTTP/1.1" 200 1050 "-" "GoogleOther"
182.3.100.140 - - [28/Jul/2026:21:22:31 +0530] "POST /wp-json/batch/v1 HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible)"
182.3.100.140 - - [28/Jul/2026:21:22:32 +0530] "POST /?rest_route=/batch/v1 HTTP/1.1" 200 3197 "-" "Mozilla/5.0 (compatible)"
66.249.66.40 - - [28/Jul/2026:21:24:23 +0530] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
79.177.135.120 - - [28/Jul/2026:21:42:34 +0530] "GET /wp-content/themes/adm4/ HTTP/2" 404 796 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148"
216.24.212.207 - - [28/Jul/2026:22:08:01 +0530] "GET // HTTP/1.1" 200 1278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
216.24.212.207 - - [28/Jul/2026:22:08:02 +0530] "GET //wp-json/batch/v1 HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
216.24.212.207 - - [28/Jul/2026:22:08:03 +0530] "GET //?rest_route=/batch/v1 HTTP/1.1" 200 1278 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
69.171.249.3 - - [28/Jul/2026:22:27:24 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
69.171.249.4 - - [28/Jul/2026:22:27:25 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
77.137.72.196 - - [28/Jul/2026:22:33:30 +0530] "GET /55/adminil/logo1.PNG HTTP/2" 404 796 "https://rahcos.com/55/adminil/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5.2 Mobile/15E148 Safari/604.1"
77.137.72.196 - - [28/Jul/2026:22:33:30 +0530] "GET /favicon.ico HTTP/2" 404 796 "https://rahcos.com/55/adminil/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5.2 Mobile/15E148 Safari/604.1"
32.193.60.217 - - [28/Jul/2026:22:50:26 +0530] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"
18.224.51.251 - - [28/Jul/2026:23:10:04 +0530] "GET /iwafut.php HTTP/1.1" 200 2622 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.19.142.168 - - [28/Jul/2026:23:10:04 +0530] "GET /utchiha_7qVHBtcr.php HTTP/1.1" 200 3130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:10:33 +0530] "GET / HTTP/1.1" 200 1236 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
18.223.149.130 - - [28/Jul/2026:23:10:41 +0530] "GET /poc.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
18.116.163.59 - - [28/Jul/2026:23:10:41 +0530] "GET /shell.php HTTP/1.1" 200 19388 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
18.117.148.14 - - [28/Jul/2026:23:10:41 +0530] "GET /x0.php HTTP/1.1" 200 8677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.19.60.19 - - [28/Jul/2026:23:11:10 +0530] "GET /wp-content/utchiha_7qVHBtcr.php HTTP/1.1" 200 3130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.148.171.46 - - [28/Jul/2026:23:11:13 +0530] "GET /wp-content/utchiha_7qVHBtcr.php HTTP/1.1" 200 3130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:10:02 +0530] "GET / HTTP/1.1" 200 1232 "http://rahcos.com/" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
3.19.31.78 - - [28/Jul/2026:23:10:04 +0530] "GET /poc.txt HTTP/1.1" 200 11 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.129.26.165 - - [28/Jul/2026:23:10:04 +0530] "GET /shell.php HTTP/1.1" 200 19384 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.20.232.164 - - [28/Jul/2026:23:10:04 +0530] "GET /x0.php HTTP/1.1" 200 8677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.16.217.255 - - [28/Jul/2026:23:10:41 +0530] "GET /utchiha_7qVHBtcr.php HTTP/1.1" 200 3130 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
3.17.147.135 - - [28/Jul/2026:23:10:41 +0530] "GET /iwafut.php HTTP/1.1" 200 2622 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:11:08 +0530] "GET /wp-content/ HTTP/1.1" 200 880 "http://rahcos.com/wp-content/" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
3.22.42.238 - - [28/Jul/2026:23:11:10 +0530] "GET /wp-content/anjv6.php HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:11:11 +0530] "GET /wp-content/ HTTP/1.1" 200 883 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
13.59.154.185 - - [28/Jul/2026:23:11:13 +0530] "GET /wp-content/anjv6.php HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:11:19 +0530] "GET /wp-content/imunify-security/ HTTP/1.1" 200 871 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
172.105.82.111 - - [28/Jul/2026:23:11:19 +0530] "GET /wp-content/imunify-security/ HTTP/1.1" 200 867 "http://rahcos.com/wp-content/imunify-security/" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.0.0 Safari/537.36"
43.166.128.86 - - [28/Jul/2026:23:22:23 +0530] "GET / HTTP/1.1" 200 1232 "http://rahcos.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.153.73.200 - - [28/Jul/2026:23:27:22 +0530] "GET /?MA HTTP/1.1" 200 1240 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.159.143.139 - - [28/Jul/2026:23:37:51 +0530] "GET /?NA HTTP/1.1" 200 1232 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
104.28.42.101 - - [28/Jul/2026:23:47:32 +0530] "GET /e/track.php?email=%7Binfo@aethioroyal.ch%7D&type=open HTTP/2" 404 796 "-" "Mozilla/5.0"
43.130.67.33 - - [28/Jul/2026:23:48:45 +0530] "GET /?MD HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
107.172.134.18 - - [28/Jul/2026:23:57:25 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
82.156.34.74 - - [28/Jul/2026:23:56:55 +0530] "GET / HTTP/1.1" 200 1232 "http://rahcos.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
77.137.76.156 - - [29/Jul/2026:00:26:13 +0530] "GET /apple-touch-icon-precomposed.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
77.137.76.156 - - [29/Jul/2026:00:26:13 +0530] "GET /apple-touch-icon.png HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
77.137.76.156 - - [29/Jul/2026:00:26:13 +0530] "GET /favicon.ico HTTP/2" 404 796 "-" "NetworkingExtension/8624.2.5.10.8 Network/5812.122.1 iOS/26.5.2"
77.137.76.156 - - [29/Jul/2026:00:26:13 +0530] "GET /55/adminil/ HTTP/2" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0"
172.236.145.72 - - [29/Jul/2026:00:40:36 +0530] "GET /wp-login.php HTTP/1.1" 404 796 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
172.236.145.72 - - [29/Jul/2026:00:40:40 +0530] "GET /wp-login.php HTTP/1.1" 404 796 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
172.236.145.72 - - [29/Jul/2026:00:40:41 +0530] "GET /wp-admin/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
124.156.225.181 - - [29/Jul/2026:00:59:42 +0530] "GET / HTTP/1.1" 200 1236 "http://www.rahcos.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
216.73.216.221 - - [29/Jul/2026:01:34:58 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:01:34:58 +0530] "GET / HTTP/2" 200 1050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
167.99.76.90 - - [29/Jul/2026:01:39:58 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 OPR/124.0.0.0"
18.226.64.131 - - [29/Jul/2026:01:41:26 +0530] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:26 +0530] "GET //feed/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:26 +0530] "GET //xmlrpc.php?rsd HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:26 +0530] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:27 +0530] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:27 +0530] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:27 +0530] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:28 +0530] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:28 +0530] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:28 +0530] "GET //2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:28 +0530] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:29 +0530] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:29 +0530] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:29 +0530] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
18.226.64.131 - - [29/Jul/2026:01:41:29 +0530] "GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
137.74.93.36 - - [29/Jul/2026:02:10:59 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.0"
216.73.216.221 - - [29/Jul/2026:02:25:31 +0530] "GET /_autoindex/assets/icons/file-text.svg HTTP/2" 200 394 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:02:25:31 +0530] "GET /shell.php HTTP/2" 200 2115 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:02:25:44 +0530] "GET /x0.php HTTP/2" 200 1730 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:02:26:12 +0530] "GET /poc.txt HTTP/2" 200 11 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:02:27:27 +0530] "GET /iwafut.php HTTP/2" 200 742 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:02:28:08 +0530] "GET /wp-content/ HTTP/2" 200 738 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:02:27:21 +0530] "GET /utchiha_7qVHBtcr.php HTTP/2" 200 1279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
74.7.175.157 - - [29/Jul/2026:02:34:11 +0530] "GET /robots.txt HTTP/2" 404 796 "http://rahcos.com/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
40.77.167.16 - - [29/Jul/2026:02:39:00 +0530] "GET /methods-to-designate-a-guardian-for-your-child-what-you-need-to-know/ HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
74.7.175.157 - - [29/Jul/2026:02:38:48 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot"
74.7.242.62 - - [29/Jul/2026:02:38:48 +0530] "GET / HTTP/2" 200 1050 "http://rahcos.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:38:50 +0530] "GET /?SA HTTP/2" 200 1052 "http://rahcos.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
157.55.39.223 - - [29/Jul/2026:02:38:52 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
74.7.242.62 - - [29/Jul/2026:02:38:53 +0530] "GET /_autoindex/assets/js/tablesort.number.js HTTP/2" 200 322 "http://rahcos.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:38:55 +0530] "GET /_autoindex/assets/css/autoindex.css HTTP/2" 200 1170 "http://rahcos.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:38:58 +0530] "GET /_autoindex/assets/js/tablesort.js HTTP/2" 200 2137 "http://rahcos.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:39:00 +0530] "GET /?MA HTTP/2" 200 1055 "http://rahcos.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:39:02 +0530] "GET /?NA HTTP/2" 200 1050 "https://rahcos.com/?SA" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:39:03 +0530] "GET /?SD HTTP/2" 200 1048 "https://rahcos.com/?SA" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.62 - - [29/Jul/2026:02:39:05 +0530] "GET /?MD HTTP/2" 200 1044 "https://rahcos.com/?MA" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
40.77.167.74 - - [29/Jul/2026:03:05:19 +0530] "GET /guide-complet-du-casino-en-ligne-tout-ce-que-vous-devez-savoir-en-2026-7/ HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
216.73.216.221 - - [29/Jul/2026:03:12:34 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:12:34 +0530] "GET /shell.php?path=%2Fhome HTTP/2" 200 1712 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:12:34 +0530] "GET /shell.php?path=%2F HTTP/2" 200 2308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:12:41 +0530] "GET /wp-content/anjv6.php HTTP/2" 200 542 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:12:41 +0530] "GET /x0.php?path=%2F HTTP/2" 200 1730 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:12:51 +0530] "GET /wp-content/imunify-security/ HTTP/2" 200 709 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:12:51 +0530] "GET /x0.php?path=%2Fhome HTTP/2" 200 1390 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:15:21 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Fshell.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 7411 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:16:00 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Fx0.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 5770 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:16:01 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Fshell.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 7908 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:13:28 +0530] "GET /shell.php?path=%2Fhome%2Frahcos HTTP/2" 200 3376 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:13:28 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2163 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:13:36 +0530] "GET /wp-content/utchiha_7qVHBtcr.php HTTP/2" 200 1279 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:13:36 +0530] "GET /x0.php?path=%2Fhome%2Frahcos HTTP/2" 200 2570 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:13:49 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 1989 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:13:49 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2383 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:14:19 +0530] "GET /shell.php?id=upload&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2368 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:14:19 +0530] "GET /shell.php?id=delete&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2382 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:14:48 +0530] "GET /shell.php?id=deface&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:14:48 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 1707 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:15:04 +0530] "GET /shell.php?id=dirbaru&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2322 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:15:04 +0530] "GET /shell.php?id=info&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2488 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:15:13 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 2361 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:15:13 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 1606 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:16:45 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2F.htaccess&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 1518 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:17:08 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Fx0.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 5587 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:17:51 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Fiwafut.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 10550 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:16:39 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Fiwafut.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 10708 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:17:33 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Fpoc.txt&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 1363 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:18:10 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Futchiha_7qVHBtcr.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 7249 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:18:26 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2F.htaccess&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 1359 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:18:39 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Fpoc.txt&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 1207 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:18:55 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Futchiha_7qVHBtcr.php&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 200 7077 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
66.249.66.76 - - [29/Jul/2026:03:21:53 +0530] "GET /robots.txt HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET / HTTP/1.1" 200 1232 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET /wp-content/uploads/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET /wp-content/plugins/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:22 +0530] "GET /wp-content/themes/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:23 +0530] "GET /wp-includes/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.129 - - [29/Jul/2026:03:27:23 +0530] "GET /wp-admin/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
216.73.216.221 - - [29/Jul/2026:03:54:49 +0530] "GET /wp-content/imunify-security/scan_data.php HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:54:49 +0530] "GET /shell.php?path=%2F%2Fproc HTTP/2" 200 3591 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:54:50 +0530] "GET /shell.php?path=%2F%2Fusr HTTP/2" 200 2090 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:54:50 +0530] "GET /shell.php?path=%2F%2Froot HTTP/2" 200 1501 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:54:52 +0530] "GET /shell.php?path=%2F%2Ftmp HTTP/2" 200 1759 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:54:52 +0530] "GET /wp-content/imunify-security/plugin_config.php HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:54:53 +0530] "GET /shell.php?path=%2F%2Fdev HTTP/2" 200 1957 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:21 +0530] "GET /shell.php?path=%2F%2Fhome2 HTTP/2" 200 1494 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:21 +0530] "GET /x0.php?path=%2F%2Fdev HTTP/2" 200 1557 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:21 +0530] "GET /shell.php?id=delete&path=%2F HTTP/2" 200 2529 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:22 +0530] "GET /shell.php?path=%2F%2Fhome HTTP/2" 200 1712 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:22 +0530] "GET /shell.php?path=%2F%2Flib64 HTTP/2" 200 56845 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:23 +0530] "GET /wp-content/imunify-security/index.php HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:23 +0530] "GET /shell.php?id=cmd&path=%2F HTTP/2" 200 2524 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:38 +0530] "GET /shell.php?path=%2F%2Fhome1 HTTP/2" 200 1494 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:38 +0530] "GET /x0.php?path=%2F%2Fusr HTTP/2" 200 1629 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:38 +0530] "GET /x0.php?path=%2F%2Froot HTTP/2" 200 1209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:39 +0530] "GET /shell.php?path=%2F%2Fhome4 HTTP/2" 200 1716 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:39 +0530] "GET /shell.php?path=%2F%2Fhome3 HTTP/2" 200 1494 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:56:24 +0530] "GET /x0.php?path=%2F%2Fhome HTTP/2" 200 1392 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:56:24 +0530] "GET /x0.php?path=%2F%2Flib64 HTTP/2" 200 44847 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:56:26 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Ftmp HTTP/2" 200 1825 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:56:27 +0530] "GET /shell.php?id=filebaru&path=%2F HTTP/2" 200 2499 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:56:27 +0530] "GET /x0.php?path=%2F%2Flib HTTP/2" 200 2429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:56:28 +0530] "GET /shell.php?id=upload&path=%2Fhome HTTP/2" 200 1918 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:09 +0530] "GET /shell.php?id=dirbaru&path=%2Fhome HTTP/2" 200 1912 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:09 +0530] "GET /x0.php?path=%2F%2Fhome3 HTTP/2" 200 1208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:09 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fssl HTTP/2" 200 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:09 +0530] "GET /x0.php?path=%2F%2Fhome2 HTTP/2" 200 1208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:10 +0530] "GET /shell.php?id=deface&path=%2Fhome HTTP/2" 200 2100 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:10 +0530] "GET /shell.php?id=info&path=%2Fhome HTTP/2" 200 2072 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:14 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Flogs HTTP/2" 200 1908 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:14 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.koality HTTP/2" 200 1530 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:15 +0530] "GET /x0.php?path=%2F%2Fhome1 HTTP/2" 200 1208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:15 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fmail HTTP/2" 200 3154 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:16 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fetc HTTP/2" 200 2085 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:16 +0530] "GET /x0.php?path=%2F%2Fhome4 HTTP/2" 200 1394 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:22 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.razor HTTP/2" 200 1990 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:09 +0530] "GET /shell.php?path=%2F%2Fvar HTTP/2" 200 2153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:09 +0530] "GET /shell.php?path=%2F%2Flib HTTP/2" 200 3504 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:10 +0530] "GET /shell.php?path=%2F%2Fetc HTTP/2" 200 4314 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:10 +0530] "GET /shell.php?path=%2F%2Fsbin HTTP/2" 200 3239 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:11 +0530] "GET /shell.php?path=%2F%2Frun HTTP/2" 200 2292 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:11 +0530] "GET /shell.php?path=%2F%2Fbin HTTP/2" 200 19161 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:12 +0530] "GET /shell.php?path=%2F%2Fopt HTTP/2" 200 2268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:28 +0530] "GET /shell.php?id=upload&path=%2Fhome%2Frahcos HTTP/2" 200 3418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:28 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Ftmp HTTP/2" 200 1483 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:29 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 2007 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:29 +0530] "GET /shell.php?id=delete&path=%2Fhome%2Frahcos HTTP/2" 200 3516 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:30 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cpanel HTTP/2" 200 2220 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:31 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Faccess-logs HTTP/2" 200 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:35 +0530] "GET /shell.php?id=info&path=%2Fhome%2Frahcos HTTP/2" 200 3588 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:35 +0530] "GET /shell.php?id=deface&path=%2Fhome%2Frahcos HTTP/2" 200 3600 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:35 +0530] "GET /shell.php?id=phpinfo&path=%2Fhome%2Frahcos%2Fpublic_html HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:36 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.softaculous HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:36 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.subaccounts HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:37 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fpublic_ftp HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:42 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Flogs HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:46 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Fetc HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:49 +0530] "GET /shell.php?id=delete&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:53 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.trash HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:58 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.cl.selector HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:22 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cl.selector HTTP/2" 200 1872 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:22 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Flscache HTTP/2" 200 1528 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:23 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 3039 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:23 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos HTTP/2" 200 3504 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:57:24 +0530] "GET /shell.php?id=filebaru&path=%2Fhome HTTP/2" 200 1969 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:00 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.spamassassin HTTP/2" 200 1887 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:00 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.gnupg HTTP/2" 200 1835 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:01 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.htpasswds HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:01 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.clwpos HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:02 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.caldav HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:58:02 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2Fwww HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:04 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:09 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos HTTP/2" 200 3473 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:13 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Fmail HTTP/2" 200 2408 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:24 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fmanager.php&path=%2Fhome%2Frahcos HTTP/2" 200 3266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:28 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.gnupg HTTP/2" 200 1468 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:33 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.spamassassin HTTP/2" 200 1484 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:38 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.clwpos HTTP/2" 200 1422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:46 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 1602 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:50 +0530] "GET /shell.php?id=upload&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 2178 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:59:57 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.cpanel HTTP/2" 200 1814 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:02 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.razor HTTP/2" 200 1578 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:07 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Faccess-logs HTTP/2" 200 1455 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:12 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Flscache HTTP/2" 200 1231 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:18 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.softaculous HTTP/2" 200 1736 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:23 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2F.subaccounts HTTP/2" 200 1429 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:28 +0530] "GET /shell.php?id=dirbaru&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 2172 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:32 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Fpublic_ftp HTTP/2" 200 1236 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:37 +0530] "GET /shell.php?id=deface&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 2341 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:40 +0530] "GET /x0.php?path=%2F%2Ftmp HTTP/2" 200 1412 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:40 +0530] "GET /shell.php?id=upload&path=%2F HTTP/2" 200 2503 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:45 +0530] "GET /shell.php?id=deface&path=%2F HTTP/2" 200 2657 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:45 +0530] "GET /x0.php?path=%2F%2Fbin HTTP/2" 200 13036 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:46 +0530] "GET /x0.php?path=%2F%2Fopt HTTP/2" 200 1814 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:47 +0530] "GET /shell.php?id=info&path=%2F HTTP/2" 200 2673 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:47 +0530] "GET /wp-content/imunify-security/index.html HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:47 +0530] "GET /shell.php?id=cmd&path=%2Fhome HTTP/2" 200 1959 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:48 +0530] "GET /x0.php?path=%2F%2Fproc HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:54 +0530] "GET /x0.php?path=%2F%2Fvar HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:54 +0530] "GET /x0.php?path=%2F%2Fetc HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:57 +0530] "GET /shell.php?id=delete&path=%2Fhome HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:57 +0530] "GET /shell.php?id=dirbaru&path=%2F HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:58 +0530] "GET /x0.php?path=%2F%2Fsbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:03:55:59 +0530] "GET /x0.php?path=%2F%2Frun HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:51 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.imunify_patch_id&path=%2Fhome%2Frahcos HTTP/2" 200 1422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:53 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.bashrc&path=%2Fhome%2Frahcos HTTP/2" 200 1561 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:43 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Fwww HTTP/2" 200 1720 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:00:59 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.gemrc&path=%2Fhome%2Frahcos HTTP/2" 200 1432 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:00 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.user.ini&path=%2Fhome%2Frahcos HTTP/2" 200 1678 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:05 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fphp.ini&path=%2Fhome%2Frahcos HTTP/2" 200 1676 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:48 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2F.bash_profile&path=%2Fhome%2Frahcos HTTP/2" 200 1255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:50 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.myimunify_id&path=%2Fhome%2Frahcos HTTP/2" 200 1418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:30 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content%2Futchiha_7qVHBtcr.php&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 7118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:34 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2F.myimunify_id&path=%2Fhome%2Frahcos HTTP/2" 200 1262 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:39 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2F.lastlogin&path=%2Fhome%2Frahcos HTTP/2" 200 1447 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:16 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fphp.ini&path=%2Fhome%2Frahcos HTTP/2" 200 1510 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:20 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content%2Fanjv6.php&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 6187 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:25 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.spamassassinboxenable&path=%2Fhome%2Frahcos HTTP/2" 200 1344 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:30 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.wp-toolkit-identifier&path=%2Fhome%2Frahcos HTTP/2" 200 1948 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:35 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.spamassassinenable&path=%2Fhome%2Frahcos HTTP/2" 200 1341 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:40 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fmanager.php&path=%2Fhome%2Frahcos HTTP/2" 200 3047 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:01:57 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2F.wp-toolkit-identifier&path=%2Fhome%2Frahcos HTTP/2" 200 1775 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:01 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2F.htaccess&path=%2Fhome%2Frahcos HTTP/2" 200 1571 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:06 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2F.user.ini&path=%2Fhome%2Frahcos HTTP/2" 200 1512 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:11 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content%2Futchiha_7qVHBtcr.php&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 7250 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:16 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2FHAMQX7-ZETA.php&path=%2Fhome%2Frahcos HTTP/2" 200 24588 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:02:21 +0530] "GET /x0.php?fileloc=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content%2Fanjv6.php&path=%2Fhome%2Frahcos%2Fpublic_html%2Fwp-content HTTP/2" 200 6026 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
212.125.4.206 - - [29/Jul/2026:04:10:21 +0530] "POST /xmlrpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 Edg/137.0.0.0"
216.73.216.221 - - [29/Jul/2026:04:33:18 +0530] "GET /robots.txt HTTP/2" 404 796 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:19 +0530] "GET /x0.php?path=%2F%2Flib%2Fmodules HTTP/2" 200 1499 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:19 +0530] "GET /shell.php?path=%2F%2Flib64%2FX11 HTTP/2" 200 1517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:20 +0530] "GET /shell.php?path=%2F%2Frun%2Fnet-snmp HTTP/2" 200 1511 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:20 +0530] "GET /shell.php?path=%2F%2Fetc%2Fpam.d HTTP/2" 200 2244 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:21 +0530] "GET /shell.php?path=%2F%2Fvar%2Fwww HTTP/2" 200 1786 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:21 +0530] "GET /shell.php?path=%2F%2Flib%2Ffontconfig HTTP/2" 200 1724 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:22 +0530] "GET /shell.php?path=%2F%2Flib64%2Ffipscheck HTTP/2" 200 1990 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:22 +0530] "GET /shell.php?path=%2F%2Frun%2Fmotd.d HTTP/2" 200 1514 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:22 +0530] "GET /shell.php?path=%2F%2Flib64%2Fsw HTTP/2" 200 1931 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:23 +0530] "GET /shell.php?id=deface&path=%2F%2Froot HTTP/2" 200 1861 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:23 +0530] "GET /shell.php?id=dirbaru&path=%2F%2Ftmp HTTP/2" 200 1993 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:23 +0530] "GET /shell.php?path=%2F%2Flib64%2Fgames HTTP/2" 200 1512 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:24 +0530] "GET /shell.php?path=%2F%2Flib64%2Fsssd HTTP/2" 200 2381 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:24 +0530] "GET /shell.php?path=%2F%2Flib64%2Fbpf HTTP/2" 200 1515 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:24 +0530] "GET /shell.php?path=%2F%2Flib64%2Fgconv HTTP/2" 200 7057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:24 +0530] "GET /shell.php?path=%2F%2Flib64%2Fnamed HTTP/2" 200 1774 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:25 +0530] "GET /shell.php?id=upload&path=%2F%2Fsbin HTTP/2" 200 3427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:25 +0530] "GET /shell.php?id=delete&path=%2F%2Fvar HTTP/2" 200 2404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:25 +0530] "GET /shell.php?path=%2F%2Flib64%2FunixODBC HTTP/2" 200 1517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:25 +0530] "GET /shell.php?path=%2F%2Flib%2Fdracut HTTP/2" 200 2212 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:25 +0530] "GET /x0.php?path=%2F%2Flib%2Fkernel HTTP/2" 200 1517 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:26 +0530] "GET /shell.php?path=%2F%2Fetc%2Fimunify360 HTTP/2" 200 1733 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:26 +0530] "GET /shell.php?path=%2F%2Flib64%2Fossl-modules HTTP/2" 200 1832 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:26 +0530] "GET /shell.php?id=delete&path=%2F%2Fetc HTTP/2" 200 4406 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:26 +0530] "GET /shell.php?path=%2F%2Flib64%2Ffirebird HTTP/2" 200 1777 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:26 +0530] "GET /shell.php?path=%2F%2Fvar%2Fimunify360 HTTP/2" 200 1726 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:26 +0530] "GET /shell.php?id=info&path=%2F%2Froot HTTP/2" 200 1867 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /shell.php?path=%2F%2Flib64%2Fmysqlclient HTTP/2" 200 1830 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /shell.php?path=%2F%2Flib64%2Fgroff HTTP/2" 200 1519 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /shell.php?path=%2F%2Fetc%2Falternatives HTTP/2" 200 3461 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /x0.php?path=%2F%2Fusr%2Flibexec HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /shell.php?path=%2F%2Flib64%2Faudit HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /shell.php?path=%2F%2Fproc%2Facpi HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:27 +0530] "GET /shell.php?path=%2F%2Fetc%2Fpki HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?path=%2F%2Flib64%2Fdri HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?path=%2F%2Fopt%2Fclwpos HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?path=%2F%2Flib64%2Flibuser HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?path=%2F%2Flib%2Fgems HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?id=upload&path=%2F%2Frun HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?path=%2F%2Flib%2Flocale HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:28 +0530] "GET /shell.php?path=%2F%2Flib%2Fjvm HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:29 +0530] "GET /shell.php?id=deface&path=%2F%2Ftmp HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:29 +0530] "GET /shell.php?path=%2F%2Fetc%2Ffonts HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:29 +0530] "GET /shell.php?path=%2F%2Flib64%2Fpm-utils HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:34 +0530] "GET /shell.php?path=%2F%2Flib64%2Fsamba HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:39 +0530] "GET /shell.php?id=dirbaru&path=%2F%2Fdev HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:44 +0530] "GET /shell.php?id=upload&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:06 +0530] "GET /shell.php?filesrc=%2F%2Fbin%2Fbatch&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:10 +0530] "GET /shell.php?filesrc=%2F%2Fbin%2Fgpgsplit&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:15 +0530] "GET /shell.php?id=filebaru&path=%2F%2Fvar HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:20 +0530] "GET /shell.php?id=deface&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:25 +0530] "GET /x0.php?path=%2F%2Flib64%2Ftraceevent HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:30 +0530] "GET /shell.php?id=filebaru&path=%2F%2Fetc HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:35 +0530] "GET /shell.php?path=%2F%2Flib64%2Fgalera-4 HTTP/2" 200 1772 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:50 +0530] "GET /shell.php?path=%2F%2Flib64%2Fgdk-pixbuf-2.0 HTTP/2" 200 1734 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:54 +0530] "GET /shell.php?filesrc=%2F%2Fbin%2Ffgrep&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:33:59 +0530] "GET /shell.php?id=info&path=%2F%2Fhome1 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:07 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibldb.so.2&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:41 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibiptcdata.so.0&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:45 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fpgrep&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:50 +0530] "GET /x0.php?path=%2F%2Flib64%2Fgtk-3.0 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:34:55 +0530] "GET /shell.php?id=info&path=%2Fhome%2Frahcos%2Fssl HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:00 +0530] "GET /x0.php?path=%2F%2Flib64%2Fi360_pam_imunify HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:05 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibncurses++w.so&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:10 +0530] "GET /shell.php?filesrc=%2F%2Fbin%2Fperlivp&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:15 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibpath_utils.so.1&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:20 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibcom_err.so.2.1&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:25 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibncurses++.so.6&path=%2F%2Flib64 HTTP/2" 200 1333 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:30 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fpod2html&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:35 +0530] "GET /x0.php?path=%2F%2Flib64%2Fapr-util-1 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:42 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fnsupdate&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:46 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibkeyutils.so.1.10&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:51 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibtic.so.6&path=%2F%2Flib64 HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:35:56 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fcat&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:01 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fcolrm&path=%2F%2Fbin HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:32 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibepoxy.so.0.0.0&path=%2F%2Flib64 HTTP/2" 200 263043 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:36 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibpcp_import.so.1&path=%2F%2Flib64 HTTP/2" 200 16086 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:41 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibasm-0.194.so&path=%2F%2Flib64 HTTP/2" 200 14519 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:46 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fznew&path=%2F%2Fbin HTTP/2" 200 3038 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:51 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibgstallocators-1.0.so.0.2212.0&path=%2F%2Flib64 HTTP/2" 200 7907 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:56 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibndp.so.0.3.0&path=%2F%2Flib64 HTTP/2" 200 11597 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:01 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fgcc-ar&path=%2F%2Fbin HTTP/2" 200 11005 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:06 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibtinfo.so.6&path=%2F%2Flib64 HTTP/2" 200 61264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:11 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibfontconfig.so.1&path=%2F%2Flib64 HTTP/2" 200 137836 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:16 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibnsl.so.1&path=%2F%2Flib64 HTTP/2" 200 41240 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:03 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibdw.so.1&path=%2F%2Flib64 HTTP/2" 200 240566 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:06 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibisccfg.so&path=%2F%2Flib64 HTTP/2" 200 60891 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:11 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2FlibSvtAv1Enc.so.0&path=%2F%2Flib64 HTTP/2" 200 1554343 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:16 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2FlibX11.so&path=%2F%2Flib64 HTTP/2" 200 615491 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:21 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2F.libgmp.so.10.4.0.hmac&path=%2F%2Flib64 HTTP/2" 200 1236 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:11 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fgroff&path=%2F%2Fbin HTTP/2" 200 33660 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:16 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Faspell&path=%2F%2Fbin HTTP/2" 200 62185 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:21 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibauthselect.so.3.1.1&path=%2F%2Flib64 HTTP/2" 200 36628 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:36:26 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibcap.so.2.48&path=%2F%2Flib64 HTTP/2" 200 15179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:22 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibgif.so.7&path=%2F%2Flib64 HTTP/2" 200 18828 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:26 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibnetsnmpmibs.so.40&path=%2F%2Flib64 HTTP/2" 200 562297 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:31 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibxcb-dri2.so.0&path=%2F%2Flib64 HTTP/2" 200 6880 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:36 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibldap-2.4.so.2.0.200&path=%2F%2Flib64 HTTP/2" 200 3382 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:41 +0530] "GET /x0.php?fileloc=%2F%2Fbin%2Fmariadb-check&path=%2F%2Fbin HTTP/2" 200 741640 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:46 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibdbus-1.so.3.19.13&path=%2F%2Flib64 HTTP/2" 200 136613 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:51 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibxcb-xinput.so.0.1.0&path=%2F%2Flib64 HTTP/2" 200 36841 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:37:56 +0530] "GET /shell.php?filesrc=%2F%2Flib64%2Flibestr.so.0.0.0&path=%2F%2Flib64 HTTP/2" 200 7335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:37 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibcrypto.so.1.1&path=%2F%2Flib64 HTTP/2" 200 1243772 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:41 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2FlibXext.so.6.4.0&path=%2F%2Flib64 HTTP/2" 200 29174 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:26 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibrrd.so.8.2.1&path=%2F%2Flib64 HTTP/2" 200 147934 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:31 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibacl.so.1&path=%2F%2Flib64 HTTP/2" 200 16869 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:03 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibverto.so&path=%2F%2Flib64 HTTP/2" 200 10373 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:07 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2FlibBrokenLocale.so.1&path=%2F%2Flib64 HTTP/2" 200 3806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:12 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibexempi.so.8&path=%2F%2Flib64 HTTP/2" 200 527747 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:17 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibxcb-record.so&path=%2F%2Flib64 HTTP/2" 200 6795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:23 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibattr.so.1.1.2501&path=%2F%2Flib64 HTTP/2" 200 9458 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:27 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibunistring.so.2.1.0&path=%2F%2Flib64 HTTP/2" 200 467047 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:32 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibfreeblpriv3.chk&path=%2F%2Flib64 HTTP/2" 200 1320 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:37 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibaec.so.0.0.12&path=%2F%2Flib64 HTTP/2" 200 13368 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:09 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cpanel%2Fcaches HTTP/2" 200 1730 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:13 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 2256 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:16 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2F.razor HTTP/2" 200 2233 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:20 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cagefs%2Fvar HTTP/2" 200 2040 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:24 +0530] "GET /shell.php?id=delete&path=%2Fhome%2Frahcos%2F.cl.selector HTTP/2" 200 2107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:29 +0530] "GET /shell.php?id=delete&path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 3148 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:34 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.trash%2Fgov1 HTTP/2" 200 2132 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:39 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2F.cpanel HTTP/2" 200 2438 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:44 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2Faccess-logs HTTP/2" 200 2125 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:46 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibgvpr.so.2&path=%2F%2Flib64 HTTP/2" 200 179385 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:51 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibncursesw.so.6&path=%2F%2Flib64 HTTP/2" 200 106904 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:38:56 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibbluetooth.so.3.19.15&path=%2F%2Flib64 HTTP/2" 200 70620 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:43 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibgtk-x11-2.0.so.0.2400.33&path=%2F%2Flib64 HTTP/2" 200 1957214 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:47 +0530] "GET /x0.php?fileloc=%2F%2Flib64%2Flibgdk-x11-2.0.so.0.2400.33&path=%2F%2Flib64 HTTP/2" 200 338186 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:52 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fetc%2Frahcos.rcube.db.1777481459&path=%2Fhome%2Frahcos%2Fetc HTTP/2" 200 14203 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:39:57 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fetc%2Frahcos.rcube.db.1779292894&path=%2Fhome%2Frahcos%2Fetc HTTP/2" 200 14839 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:02 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2Fetc%2Frahcos.rcube.db.1784240911&path=%2Fhome%2Frahcos%2Fetc HTTP/2" 200 14683 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:50 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2Flscache HTTP/2" 200 1790 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:54 +0530] "GET /x0.php?path=%2Fhome%2Frahcos%2Ftmp%2Fanalog HTTP/2" 200 1803 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:40:59 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2F.cl.selector HTTP/2" 200 2126 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:41:04 +0530] "GET /shell.php?id=cmd&path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 3181 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:41:11 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cpanel%2Fdatastore HTTP/2" 200 2736 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:41:14 +0530] "GET /shell.php?path=%2Fhome%2Frahcos%2F.cagefs%2Fopt HTTP/2" 200 1900 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:41:20 +0530] "GET /shell.php?id=deface&path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 3282 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:41:24 +0530] "GET /shell.php?id=dirbaru&path=%2Fhome%2Frahcos%2F.cl.selector HTTP/2" 200 2084 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:01 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.trash%2Fxmlrpc.php&path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 2842 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:06 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 2242 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:09 +0530] "GET /shell.php?id=dirbaru&path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 2215 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:13 +0530] "GET /shell.php?id=deface&path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 2322 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:17 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos%2F.cpanel HTTP/2" 200 2448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:22 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos%2F.razor HTTP/2" 200 2217 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:27 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos%2Flscache HTTP/2" 200 1763 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:32 +0530] "GET /shell.php?id=filebaru&path=%2Fhome%2Frahcos%2Faccess-logs HTTP/2" 200 2099 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:37 +0530] "GET /shell.php?id=info&path=%2Fhome%2Frahcos%2F.cagefs HTTP/2" 200 2337 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:50 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.trash%2Freadme.html&path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 4418 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:55 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.trash%2Fwp-blog-header.php&path=%2Fhome%2Frahcos%2F.trash HTTP/2" 200 1548 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
216.73.216.221 - - [29/Jul/2026:04:42:59 +0530] "GET /shell.php?filesrc=%2Fhome%2Frahcos%2F.cpanel%2Fnvdata.cache&path=%2Fhome%2Frahcos%2F.cpanel HTTP/2" 200 1685 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"

© 2026 Iwafut Security