Intrusion Exploit
Server: LiteSpeed
System: Linux cisadane.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: lenf4658 (1805)
PHP: 8.4.19
Disabled: NONE
$ pwd: /home/lenf4658/access-logs/
Upload Files
File: //home/lenf4658/access-logs/hrisconnect.lensapedia.id-ssl_log
91.214.76.74 - - [04/Apr/2026:19:28:11 +0700] "GET /livewire/livewire.js HTTP/1.1" 500 0 "-" "Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"
91.214.76.74 - - [04/Apr/2026:19:28:45 +0700] "GET /livewire/livewire.min.js HTTP/1.1" 500 0 "https://hrisconnect.lensapedia.id/livewire/livewire.js" "Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"
91.214.76.74 - - [04/Apr/2026:19:28:45 +0700] "GET /public/livewire/livewire.js HTTP/1.1" 500 0 "https://hrisconnect.lensapedia.id/livewire/livewire.min.js" "Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"
91.214.76.74 - - [04/Apr/2026:19:28:46 +0700] "GET /vendor/livewire/livewire.js HTTP/1.1" 500 0 "https://hrisconnect.lensapedia.id/public/livewire/livewire.js" "Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"
91.214.76.74 - - [04/Apr/2026:19:28:46 +0700] "GET /public/livewire/livewire.min.js HTTP/1.1" 500 0 "https://hrisconnect.lensapedia.id/vendor/livewire/livewire.js" "Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"
91.214.76.74 - - [04/Apr/2026:19:29:21 +0700] "GET /vendor/livewire/livewire.min.js HTTP/1.1" 500 0 "https://hrisconnect.lensapedia.id/public/livewire/livewire.min.js" "Mozilla/5.0 (X11; Linux i686; rv:49.0) Gecko/20100101 Firefox/49.0"
3.139.242.79 - - [04/Apr/2026:22:16:29 +0700] "GET / HTTP/1.1" 500 0 "http://hrisconnect.lensapedia.id/" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
3.139.242.79 - - [04/Apr/2026:22:18:05 +0700] "GET / HTTP/1.1" 500 0 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
66.249.71.169 - - [04/Apr/2026:22:54:22 +0700] "GET /robots.txt HTTP/1.1" 500 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.72.232 - - [04/Apr/2026:22:54:22 +0700] "GET /robots.txt HTTP/1.1" 500 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
@ Telegram