JezK
Edit File: leave.mahachem.com
52.141.45.117 - - [14/Sep/2026:09:06:46 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:46 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:46 -0500] "GET /bless.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:47 -0500] "GET /sts.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:47 -0500] "GET /z70.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:48 -0500] "GET /f35.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:48 -0500] "GET //adminfuns.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:49 -0500] "GET /3PJcpMFsD8B.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:49 -0500] "GET //av.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:50 -0500] "GET /av.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:50 -0500] "GET /dex.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:51 -0500] "GET /chosen.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:51 -0500] "GET /1.php?p= HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:52 -0500] "GET /radio.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:52 -0500] "GET /blacks.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:53 -0500] "GET /run.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:53 -0500] "GET /alfa.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:54 -0500] "GET /w.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:54 -0500] "GET /wp_blog_footer.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:54 -0500] "GET /sss.php?p= HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:55 -0500] "GET /b8.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:55 -0500] "GET /xex.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:56 -0500] "GET //CAE-2.5.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:56 -0500] "GET /ass.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:57 -0500] "GET /jybkxer.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:57 -0500] "GET /wsd.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:58 -0500] "GET /media.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:58 -0500] "GET /images.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:58 -0500] "GET /ops.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:59 -0500] "GET /BDKR28WP.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:06:59 -0500] "GET /mac.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:00 -0500] "GET /wmore1.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:00 -0500] "GET /ab.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:00 -0500] "GET /z60.php?p= HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:01 -0500] "GET //database2.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:01 -0500] "GET /aa.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:02 -0500] "GET /pJPoKA.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:02 -0500] "GET /24.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:02 -0500] "GET /fryvbbn.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:03 -0500] "GET /ff2.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:03 -0500] "GET /xxw.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:04 -0500] "GET /gi2.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:04 -0500] "GET /min.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:05 -0500] "GET /n30n.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:05 -0500] "GET /wawan.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:05 -0500] "GET /gigi.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:06 -0500] "GET /bnmtp.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:06 -0500] "GET /ebkid.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:07 -0500] "GET /myglu.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:07 -0500] "GET /xp.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:08 -0500] "GET /leeocvou.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:08 -0500] "GET /ugmlxqxz.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:09 -0500] "GET /mpwkxnos.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:09 -0500] "GET /133.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:10 -0500] "GET /x33.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:10 -0500] "GET /xetmolxr.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:10 -0500] "GET /mk.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:11 -0500] "GET /zpcutwcq.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:11 -0500] "GET /efjgujst.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:12 -0500] "GET /155.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:12 -0500] "GET /faii.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:12 -0500] "GET /indo.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:13 -0500] "GET /ano.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:13 -0500] "GET /xenon1337.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:14 -0500] "GET /upgrtfg.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:14 -0500] "GET /wp%20x3.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:14 -0500] "GET /kok.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:15 -0500] "GET /cae.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:15 -0500] "GET /txets.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:16 -0500] "GET /A5.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:16 -0500] "GET /saorvwys.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:16 -0500] "GET /mu2.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:17 -0500] "GET /ms.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 52.141.45.117 - - [14/Sep/2026:09:07:17 -0500] "GET /wp-update.php HTTP/1.1" 409 83 "-" "-" www.leave.mahachem.com 10.37.102.197 62.60.130.117 - - [14/Sep/2026:14:53:24 -0500] "GET /.vscode/sftp.json HTTP/1.1" 301 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" leave.mahachem.com 10.37.102.197 62.60.130.117 - - [14/Sep/2026:14:53:26 -0500] "GET /sftp-config.json HTTP/1.1" 301 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" leave.mahachem.com 10.37.102.197