From 35120cae906d2c16b0ab52e5b0275fb21784672a Mon Sep 17 00:00:00 2001
From: st-server <st@server>
Date: Mon, 15 Dec 2025 14:52:25 +0100
Subject: [PATCH] mehr logging

---
 index.php | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/index.php b/index.php
index 03c9fae..d4ddeaa 100644
--- a/index.php
+++ b/index.php
@@ -1,6 +1,21 @@
 <?php
-error_log ( '[' . date ( 'D M j h:i:s.v Y' ) . '] [' . $_SERVER ['HTTP_HOST'] . '] [myhoneypot] [' . $_SERVER ['REMOTE_ADDR'] . '] BAN ME PLZ' . "\n", 3, '/var/www/banmeplz.log' );
-sleep ( 5 );
+function logHack($msg) {
+    $logFile = "/var/log/apache2/hack_attempts.log";
+    
+    $timestamp = date("Y-m-d H:i:s");
+    $ip = $_SERVER['REMOTE_ADDR'] ?? 'UNKNOWN';
+    $userAgent = $_SERVER['HTTP_USER_AGENT'] ?? 'UNKNOWN';
+    $url = $_SERVER['REQUEST_URI'] ?? 'UNKNOWN';
+    $referer = $_SERVER['HTTP_REFERER'] ?? 'UNKNOWN';
+
+    $logEntry = "[$timestamp] BANMEPLZ IP: $ip | URL: $url | Ref: $referer | UA: $userAgent | Msg: $msg";
+    
+    error_log($logEntry . PHP_EOL, 3, $logFile);
+}
+
+
+logHack($_GET['h']??'unk');
+sleep ( 25 );
 if (isset ( $_GET ['h'] )) {
   if ($_GET ['h'] == 'xmlrpc') {
     echo '<?xml version="1.0" encoding="UTF-8"?>