F3RGUSO WEBSHELL 403

View file

File name : onemasteredu.com
Content :
118.195.153.213 - - [30/May/2025:14:15:10 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
170.106.181.163 - - [30/May/2025:14:30:31 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.153.107.22 - - [30/May/2025:18:29:15 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
45.141.215.102 - - [30/May/2025:18:41:51 +0200] "GET /phpmyadmin HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
170.39.218.58 - - [30/May/2025:18:55:01 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/121.0.0.0"
146.70.194.230 - - [30/May/2025:19:28:09 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
43.153.107.22 - - [30/May/2025:19:58:59 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
52.138.220.165 - - [30/May/2025:20:12:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 281 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:08 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 267 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:08 +0200] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 262 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:09 +0200] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 - "-" "-"
52.138.220.165 - - [30/May/2025:20:12:09 +0200] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 294 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:09 +0200] "GET /cgi-bin/about.php HTTP/1.1" 301 250 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:09 +0200] "GET /wp-admin/css/index.php HTTP/1.1" 301 255 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:10 +0200] "GET /.well-known/admin.php HTTP/1.1" 301 254 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:10 +0200] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 - "-" "-"
52.138.220.165 - - [30/May/2025:20:12:10 +0200] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 16 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:11 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 251 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:11 +0200] "GET /wp-content/about.php HTTP/1.1" 301 253 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:11 +0200] "GET /wp-includes/about.php HTTP/1.1" 301 254 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:12 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 301 261 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:12 +0200] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 264 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:12 +0200] "GET /.well-known/about.php HTTP/1.1" 301 254 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:13 +0200] "GET /wp-admin/images/index.php HTTP/1.1" 301 258 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:13 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 258 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:13 +0200] "GET /wp-admin/includes/about.php HTTP/1.1" 301 260 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:14 +0200] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 - "-" "-"
52.138.220.165 - - [30/May/2025:20:12:14 +0200] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 262 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:15 +0200] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 263 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:15 +0200] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 263 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:16 +0200] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 301 268 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:16 +0200] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 277 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:16 +0200] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 404 16 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:16 +0200] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 257 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:17 +0200] "GET /wp-content/themes/about.php HTTP/1.1" 301 260 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:17 +0200] "GET /wp-admin/js/about.php HTTP/1.1" 301 254 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:17 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 265 "-" "-"
52.138.220.165 - - [30/May/2025:20:12:18 +0200] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 269 "-" "-"
118.89.233.234 - - [30/May/2025:20:41:05 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
194.26.192.112 - - [30/May/2025:21:13:28 +0200] "GET /phpmyadmin HTTP/1.1" 301 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
31.56.56.153 - - [30/May/2025:21:28:52 +0200] "GET /.env HTTP/1.1" 301 237 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
31.56.56.153 - - [30/May/2025:21:28:55 +0200] "POST / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
72.13.62.27 - - [30/May/2025:22:17:53 +0200] "GET /robots.txt HTTP/1.1" 301 247 "-" "Mozilla/5.0 (compatible; ips-agent)"
72.13.62.27 - - [30/May/2025:22:17:55 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (compatible; ips-agent)"
178.159.37.49 - - [30/May/2025:22:51:34 +0200] "GET /contact/ HTTP/1.0" 301 241 "http://onemasteredu.com/contact/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0"
43.157.188.74 - - [30/May/2025:23:21:53 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
140.143.98.18 - - [30/May/2025:23:43:09 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.155.195.141 - - [31/May/2025:00:30:42 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
77.90.153.231 - - [31/May/2025:00:40:33 +0200] "GET /.env HTTP/1.1" 301 237 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
77.90.153.231 - - [31/May/2025:00:40:33 +0200] "POST / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
77.90.153.231 - - [31/May/2025:00:40:34 +0200] "GET /sendgrid/.env HTTP/1.1" 301 246 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
77.90.153.231 - - [31/May/2025:00:40:34 +0200] "POST / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
52.178.209.18 - - [31/May/2025:01:37:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 281 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:32 +0200] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 16 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:33 +0200] "GET /.well-known/acme-challenge/about.php?p= HTTP/1.1" 404 16 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:33 +0200] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 404 16 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:33 +0200] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 200 - "-" "-"
52.178.209.18 - - [31/May/2025:01:37:33 +0200] "GET /.well-known/acme-challenge/shop.php HTTP/1.1" 404 16 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:33 +0200] "GET /.well-known/acme-challenge/sxo.php HTTP/1.1" 404 16 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:34 +0200] "GET /.well-known/acme-challenge/worksec.php HTTP/1.1" 404 16 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:34 +0200] "GET /.well-known/admin.php HTTP/1.1" 301 254 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:34 +0200] "GET /.well-known/afcsthua.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:34 +0200] "GET /.well-known/apap.php HTTP/1.1" 301 253 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:35 +0200] "GET /.well-known/awraulub.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:35 +0200] "GET /.well-known/bqdoemhl.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:35 +0200] "GET /.well-known/cihjbmjk.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:36 +0200] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 266 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:36 +0200] "GET /.well-known/eror.php HTTP/1.1" 301 253 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:37 +0200] "GET /.well-known/esjmskva.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:37 +0200] "GET /.well-known/fm.php HTTP/1.1" 301 251 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:37 +0200] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 264 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:38 +0200] "GET /.well-known/index.php HTTP/1.1" 301 254 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:38 +0200] "GET /.well-known/info.php HTTP/1.1" 301 253 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:38 +0200] "GET /.well-known/ktlldmmx.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:39 +0200] "GET /.well-known/mfeypwze.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:39 +0200] "GET /.well-known/nzhlgkwk.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:39 +0200] "GET /.well-known/oduexytv.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:40 +0200] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 - "-" "-"
52.178.209.18 - - [31/May/2025:01:37:40 +0200] "GET /.well-known/pki-validation/about.php?p= HTTP/1.1" 404 - "-" "-"
52.178.209.18 - - [31/May/2025:01:37:40 +0200] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 - "-" "-"
52.178.209.18 - - [31/May/2025:01:37:40 +0200] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 - "-" "-"
52.178.209.18 - - [31/May/2025:01:37:40 +0200] "GET /.well-known/tiny.php HTTP/1.1" 301 253 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:41 +0200] "GET /.well-known/worksec.php HTTP/1.1" 301 256 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:41 +0200] "GET /.well-known/wp-login.php HTTP/1.1" 301 257 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:42 +0200] "GET /.well-known/xin1.php HTTP/1.1" 301 253 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:42 +0200] "GET /.well-known/zwso.php HTTP/1.1" 301 253 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:42 +0200] "GET /1.php HTTP/1.1" 301 238 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:43 +0200] "GET /2index.php HTTP/1.1" 301 243 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:43 +0200] "GET /404.php HTTP/1.1" 301 240 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:43 +0200] "GET /404.php?p= HTTP/1.1" 301 243 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:44 +0200] "GET /aa.php HTTP/1.1" 301 239 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:44 +0200] "GET /about.php HTTP/1.1" 301 242 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:44 +0200] "GET /about.php?525 HTTP/1.1" 301 246 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:45 +0200] "GET /about.php?p= HTTP/1.1" 301 245 "-" "-"
52.178.209.18 - - [31/May/2025:01:37:45 +0200] "GET /about/function.php HTTP/1.1" 301 251 "-" "-"
13.218.44.180 - - [31/May/2025:01:51:02 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
13.218.44.180 - - [31/May/2025:01:51:03 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
159.203.20.103 - - [31/May/2025:02:36:55 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0"
203.2.64.59 - - [31/May/2025:02:45:32 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
18.234.223.175 - - [31/May/2025:03:37:54 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36"
18.234.223.175 - - [31/May/2025:03:37:54 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:2.2a1pre) Gecko/20100101 Firefox/4.2a1pre"
18.237.152.204 - - [31/May/2025:05:29:32 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36"
118.195.165.218 - - [31/May/2025:05:47:57 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.153.10.83 - - [31/May/2025:07:33:11 +0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
124.221.245.78 - - [31/May/2025:08:57:00 +0200] "GET / HTTP/1.1" 301 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
F3RGUSO WEBSHELL COUNTER 403

View file
