shell bypass 403

UnknownSec Shell

: /home/bouloter/access-logs/ [ drwxr-x--- ]
upload mass deface mass delete console info server

name : monassureur.bouloter.com
34.182.90.208 - - [19/Sep/2025:09:12:01 +0000] "GET / HTTP/1.1" 200 17 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:01 +0000] "GET / HTTP/1.1" 200 17 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:01 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:01 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:02 +0000] "GET / HTTP/1.1" 200 17 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:02 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:03 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:03 +0000] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:03 +0000] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:04 +0000] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:05 +0000] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
34.182.90.208 - - [19/Sep/2025:09:12:05 +0000] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
35.240.57.99 - - [19/Sep/2025:09:51:19 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
193.233.75.252 - - [19/Sep/2025:10:45:20 +0000] "GET /.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50"
35.187.99.66 - - [19/Sep/2025:10:08:54 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
193.233.75.252 - - [19/Sep/2025:10:23:23 +0000] "GET /.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; en-us) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50"
165.227.39.219 - - [19/Sep/2025:12:47:20 +0000] "GET /favicon.ico HTTP/1.1" 404 1251 "http://www.monassureur.bouloter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
35.240.206.14 - - [19/Sep/2025:12:37:52 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
165.227.39.219 - - [19/Sep/2025:12:47:20 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
34.126.138.180 - - [19/Sep/2025:12:35:09 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)"
13.218.105.164 - - [19/Sep/2025:16:06:08 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
205.169.39.44 - - [19/Sep/2025:17:03:54 +0000] "GET / HTTP/1.1" 200 37 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
205.210.31.79 - - [19/Sep/2025:16:39:20 +0000] "GET / HTTP/1.1" 200 17 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
147.185.132.105 - - [20/Sep/2025:00:13:57 +0000] "GET /webshell.php HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
147.185.132.105 - - [20/Sep/2025:00:13:58 +0000] "GET /webshell HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
198.235.24.5 - - [20/Sep/2025:00:17:45 +0000] "GET /shell.php HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
198.235.24.178 - - [20/Sep/2025:00:31:40 +0000] "GET /shell HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"

© 2025 UnknownSec
afwwrfwafr45458465
Password