!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64
 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/tmp/awstats/ssl/   drwx------
Free 237.2 GB of 981.82 GB (24.16%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     awstats022023.phbcoop.com.17507765-18-20171030205522.webstarterz.com.txt (16.36 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202302 will be lost/reset.
# Last config file used to build this data file was /home/cp949260/tmp/awstats/ssl/awstats.phbcoop.com.17507765-18-20171030205522.webstarterz.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2055                
POS_TIME 2726                
POS_VISITOR 14017               
POS_DAY 15851               
POS_DOMAIN 3466                
POS_LOGIN 3819                
POS_ROBOT 3974                
POS_WORMS 4436                
POS_EMAILSENDER 4567                
POS_EMAILRECEIVER 4710                
POS_SESSION 16174               
POS_SIDER 16331               
POS_FILETYPES 4845                
POS_DOWNLOADS 5068                
POS_OS 6764                
POS_BROWSER 6970                
POS_SCREENSIZE 7379                
POS_UNKNOWNREFERER 7453                
POS_UNKNOWNREFERERBROWSER 8163                
POS_ORIGIN 8568                
POS_SEREFERRALS 8703                
POS_PAGEREFS 8866                
POS_SEARCHWORDS 9014                
POS_KEYWORDS 9166                
POS_MISC 2390                
POS_ERRORS 9225                
POS_CLUSTER 3675                
POS_SIDER_404 9311                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230316201212 1 0 9359980394164
FirstTime 20230216214812
LastTime 20230228175322
LastUpdate 20230317205540 1 0 0 0 0
TotalVisits 46                  
TotalUnique 44                  
MonthHostsKnown 0                   
MonthHostsUnknown 45                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
DirectorSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 11 101 4731424
1 1 1 38069 16 102 5279108
2 13 13 494897 11 103 5210852
3 0 0 0 6 20 3591284
4 1 1 38069 6 104 47118721
5 7 7 266483 71 81 7619531
6 2 2 76138 2 11 4599659
7 1 1 38069 3 106 5830462
8 1 1 38069 1 35 4060521
9 0 0 0 4 18 1081782
10 1 1 38069 1 6 5198413
11 1 1 38069 3 4 83565
12 4 13 1198676 0 8 350841
13 8 64 2962959 24 240 23657216
14 1 1 38069 7 63 8905495
15 1 1 38069 20 31 3461368
16 7 56 2546437 13 68 4552879
17 6 6 228414 1 16 343654
18 1 1 38069 2 9 778423
19 0 0 0 1 3 21876
20 2 2 76138 7 16 423857
21 3 3 114207 219 224 71605
22 1 1 38069 1 6 38069
23 0 1 37495 3 71 2735390
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 10
us 28 28 1065932
th 17 132 6669429
ca 5 5 190345
se 4 4 152276
ru 2 2 76138
be 2 2 76138
de 1 1 38069
cl 1 1 38069
in 1 1 38069
gb 1 1 38069
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 8
bingbot/ 594 44339456 20230228151129 0
AhrefsBot/ 306 14402979 20230227230541 0
bingpreview 64 3327705 20230228030037 0
Applebot/ 16 14585732 20230221062420 0
YandexBot/ 15 62406559 20230228002521 0
no_user_agent 9 342621 20230228153431 0
Go\-http\-client/ 5 190345 20230228153437 0
facebookexternalhit/ 4 150598 20230225160403 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 9
css 38 2449896 0 0
pdf 1 663500 0 0
gif 2 3474 0 0
jpg 13 976823 0 0
woff2 8 385280 0 0
js 52 1789298 0 0
php 6 257421 0 0
png 9 60172 0 0
html 48 1796670 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 27
/phb_admin/docs/doc_149965565120220420_093905.pdf 3 0 1990500
/phb_admin/docs/doc_136310967320220427_143907.pdf 2 0 10132982
/phb_admin/docs/doc_101773644420220928_111908.pdf 1 0 33117
/phb_admin/docs/doc_184213019320221004_131033.pdf 1 0 185728
/phb_admin/docs/doc_108810288820220419_101000.pdf 1 0 855759
/phb_admin/docs/doc_141261847020220420_114150.pdf 1 0 1436766
/phb_admin/docs/doc_75158118620220427_161249.pdf 1 0 89675
/phb_admin/docs/doc_133203459420220420_144210.pdf 1 0 1020811
/phb_admin/docs/doc_213925987220220418_111216.pdf 1 0 54744
/phb_admin/docs/doc_145772434820220427_145224.pdf 1 0 549331
/phb_admin/docs/doc_65348249020220928_115644.pdf 1 0 2796637
/phb_admin/docs/doc_6670507920220607_114327.pdf 1 0 365932
/phb_admin/docs/doc_205011815120221004_130912.pdf 1 0 138968
/phb_admin/docs/doc_182330127320220419_095154.pdf 1 0 41127095
/phb_admin/docs/doc_73189174120220420_112745.pdf 1 0 614467
/phb_admin/docs/doc_80625785120220420_090829.pdf 1 0 393499
/phb_admin/docs/doc_202123739920220419_101825.pdf 1 0 275001
/phb_admin/docs/doc_44489096420220420_144833.pdf 1 0 1755063
/phb_admin/docs/doc_95249867920220427_143407.pdf 1 0 444228
/phb_admin/docs/doc_87663892320220420_113848.pdf 1 0 2832124
/phb_admin/docs/doc_44820941420220427_145343.pdf 1 0 1465262
/phb_admin/docs/doc_191458788820220420_100044.pdf 1 0 9443683
/phb_admin/docs/doc_209332797120220928_115549.pdf 1 0 2716166
/phb_admin/docs/doc_204833226520220420_094103.pdf 1 0 6436339
/phb_admin/docs/doc_96461084120220420_112531.pdf 1 0 2858221
/phb_admin/docs/doc_127771012420220418_111339.pdf 1 0 55326
/phb_admin/docs/doc_96883288720220519_090515.pdf 1 0 3020375
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 10
win10 18 9
android 125 19
androidmarshmallow 5 5
ios_iphone 2 2
winxp 1 1
androidkitkat 3 3
linux 8 8
macosx11 1 1
win8.1 2 2
Unknown 12 12
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 18
chrome49.0.2623.87 1 1
chrome109.0.0.0 13 4
safari16.3 1 1
android 3 3
chrome52.0.2737.98 5 5
chrome44.0.2403.157 1 1
firefox52.0 1 1
chrome103.0.5060.114 5 5
chrome64.0.3282.144 1 1
chrome105.0.0.0 4 4
mozilla 8 8
Unknown 4 4
chrome83.0.4103.97 8 8
chrome110.0.5481.65 1 0
safari16.0 1 1
chrome106.0.5249.126 64 8
firefox109.0 2 2
chrome109.0.5414.117 54 5
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 5
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230226161045
python-requests/2.28.2 20230224113230
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230227064507
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230225104113
Mozilla/5.0_zgrab/0.x_(compatible;_Researchscan/http;__http://researchscan.comsys.rwth-aachen.de) 20230216214812
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 2
python-requests/2.28.2 20230224113230
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230225104113
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 43 43
From1 0 0
From2 2 3
From3 0 0
From4 17 131
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_com 2 3
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 412 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 246
/wp-login.php 1 -
/Cpanel.php 1 -
/autoload_classmap.php 1 -
/3.php 1 -
/wp-confirm.php 1 -
/rahma.php 1 -
/wp-admin.php 1 -
/mailer.php 1 -
/alfav4.1-tesla.php 1 -
/srx.php 1 -
/wp-admin/includes/tablepress_controllers.php 1 -
/css.php 1 -
/phb_admin/uploadphoto/Thumbnails/thumbnails_20-12-2022_02_50_02.pdf 10 -
/wp-content/includes/uploads/Va.php 1 -
/WSO.php 1 -
/777.php 1 -
/mar.php 1 -
/ws.php 1 -
/wp-admin/includes/maint/wp-cron.php 1 -
/tuco.php 1 -
/a.php 1 -
/ice.php 1 -
/wikindex.php 1 -
/h.php 1 -
/wp-content/mode.php 1 -
/sh3ll.php 1 -
/404.php 1 -
/wp-SEo.php 1 -
/baindex.php 1 -
/FoxWSO.php 1 -
/haxor.php 1 -
/v.php 1 -
/leafmailer2.8.php 1 -
/wp-admin/includes/maint/repair-bak.php 1 -
/wp-one.php 1 -
/d.php 1 -
/up.php 1 -
/static/admin/javascript/hetong.js 5 -
/uploads/contexmini.php 1 -
/wp-content/5.php 1 -
/api/search 5 -
/send.php 1 -
/sym403.php 1 -
/wp-blog.php 1 -
/error.php 1 -
/info.php 5 -
/j.php 1 -
/wp-0.php 1 -
/t.php 1 -
/q.php 1 -
/leaf.php 1 -
/content.php 1 -
/upload.php 1 -
/wp.php 1 -
/nasgor.php 1 -
/shells.php 1 -
/sitemaps.xml 2 -
/100.php 1 -
/wp-content/themes/seotheme/db.php 1 www.google.com
/z.php 1 -
/2index.php 1 -
/byp.php 1 -
/img/logo_icon.png 12 -
/radio.php 1 -
/87.php 1 -
/13.php 1 -
/s.php 1 -
/new.php 1 -
/1975.php 1 -
/.vscode/sftp.json 5 -
/wp-content/uploads/readindex.php 1 -
/11index.php 1 -
/alf.php 1 -
/wp-ahmed.php 1 -
/gklhztcy.php 1 www.google.com
/Sendemail.php 1 -
/images/vuln.php 1 -
/wp/rahma.php 1 -
/kn.php 1 -
/dr.php 1 -
/data.php 1 -
/wp-admin/includes/mar.php 1 -
/if.php 1 -
/Gel.php 1 -
/bb.php 1 -
/wp-file.php 1 -
/wp-content/uploads/small.php 1 -
/7yn.php 1 -
/wso1337.php 1 -
/wsa.php 1 -
/sym.php 1 -
/k.php 1 -
/priv8.php 1 -
/.git/config 6 -
/defau1t.php 1 -
/r.php 1 -
/wp-includes/sys.php 1 -
/f.php 1 -
/vita.php 1 -
/cms.php 1 -
/o.php 1 -
/.DS_Store 5 -
/debug/default/view 5 -
/4price.php 1 -
/alwso.php 1 -
/alexus.php 1 -
/c99.php 1 -
/0byte.php 1 -
/zabi.php 1 -
/olu.php 1 -
//hehe.php 1 -
/bypass.php 1 -
/fa.php 1 -
/1.php 1 -
/cp.php 1 -
/wpse.php 1 -
/.env.example 1 -
/wp-admin/includes/maint/wp-readindex.php 1 -
/s/1353e2839313e24343e2336313/_/ 5 -
/wp-admin/includes/readindex.php 1 -
/l.php 1 -
/media-admin.php 1 -
/fuckyou.php 1 -
/kiss.php 1 -
/x.php 1 -
/ups.php 1 -
/new-index.php 1 -
/!.php 1 -
/symlink.php 1 -
/wp-content/codeboy1877_up.php 1 -
/ww.php 1 -
/wsanon.php 1 -
/alfa123.php 1 -
/Public/home/js/check.js 5 -
/old-index.php 1 -
/marijuana.php 1 -
/wp-uploads.php 1 -
/xx.php 1 -
/403.php 1 -
/Ninja.php 1 -
/hehe.php 1 -
/wp-content/wp-admin.php 1 -
/xo.php 1 -
/m.php 1 -
/y.php 1 -
/alexus-mailer.php 1 -
/wp-rss.php 1 -
/yoi.php 1 -
/xml 1 -
/kk.php 1 -
/e.php 1 -
/mi.php 1 -
/cpanel.php 1 -
/kindex.php 1 -
/gaza.php 1 -
/owl.php 1 -
/server-status 5 -
/sitemap.txt 2 -
/sendmail.php 1 -
/0.php 1 -
/config.json 5 -
/1index.php 1 -
/XxX.php 1 -
/codeboy1877x.php 1 -
/nee.php 1 -
/b.php 1 -
/root.php 1 -
/wp-admin/css/modern/colors.css.php 1 -
/.fk.php 1 -
/g.php 1 -
/ok.php 1 -
/23.php 1 -
/hello.php 1 -
/alexusmailer%202.0.php 1 -
/wp-configer.php 1 -
/wp-content/wp-logins.php 1 -
/wp-ad.php 1 -
/wp-plain.php 1 www.google.com
/user.php 1 -
/alexuse.php 1 -
/axx.php 1 -
/doc.php 1 -
/1877.php 1 -
/c.php 1 -
/xindex.php 1 -
/export.php 1 -
/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application 5 -
/it.php 1 -
/sitemap.xml.gz 2 -
//wp-2019.php 1 -
/anone.php 1 -
/fox.php 1 -
/alfa.php 1 -
/.env 10 -
/lf.php 1 -
/3index.php 1 -
/alex.php 1 -
/xox.php 1 -
/MARIJUANA.php 1 -
/mrjn.php 1 -
/wp-admin/includes/media-site.php 1 -
/shell.php 1 -
/xxx.php 1 -
/mini.php 1 -
/wp-admin/includes/block-line.php 1 -
/stindex.php 1 -
/Anonime-shell.php 1 -
/FoxWSOv1.php 1 -
/v2/_catalog 5 -
/shx.php 1 -
/lol.php 1 -
/broken.mp3 20 -
/ico.php 1 -
/rss.php 1 -
/wso.php 1 -
/login.action 5 -
/w.php 1 -
/i.php 1 -
/about 5 -
/blog.php 1 -
/Lux.php 1 -
/wp2.php 1 -
/wp-admin/includes/class-wp-media-list-data.php 1 -
/1337.php 1 -
/p.php 1 -
/edit-form.php 1 -
/wso2.php 1 -
/n.php 1 -
/wi.php 1 -
/sindex.php 1 -
/wp-admin-configs.php 1 -
///wp-login.php 1 http://www.google.com.hk
/telescope/requests 5 -
/robots.txt 51 -
/20.phpwp-content/5.php 1 -
/fw.php 1 -
/41.php 1 -
/2.php 1 -
/wp-2019.php 1 -
/wp-admin/includes/edit-tag-menu.php 1 -
/ohayo.php 1 -
/u.php 1 -
/www.php 1 -
/wxo.php 1 -
/.wp-cache.php 1 -
/wso1.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 45
49.237.4.133 8 64 2962959 20230221133322
1.46.14.227 5 54 2470299 20230228165529
223.207.241.94 4 13 1198676 20230220124855
47.254.16.187 2 2 76138 20230228175322
195.211.77.140 2 2 76138 20230228054415
162.142.125.221 2 2 76138 20230227064507
193.235.141.134 2 2 76138 20230224050155
54.201.100.47 1 1 38069 20230225022257
139.144.150.26 1 1 38069 20230228054518
205.210.31.38 1 1 38069 20230218075653
137.226.113.44 1 1 38069 20230216214812
139.144.150.45 1 1 38069 20230228054515
3.66.30.190 1 1 38069 20230218021042
198.235.24.50 1 1 38069 20230225104113
162.142.125.210 1 1 38069 20230225171501
193.235.141.156 1 1 38069 20230226205723
87.236.176.73 1 1 38069 20230226161045
198.235.24.182 1 1 38069 20230221045001
34.220.16.83 1 1 38069 20230225022201
87.236.176.211 1 1 38069 20230219204504
139.144.150.205 1 1 38069 20230228153437
52.37.160.226 1 1 38069 20230222021730
143.42.116.90 1 1 38069 20230228054508
47.88.78.6 1 1 38069 20230228175322
34.22.176.30 1 1 38069 20230228082043
182.53.100.3 0 1 37495 
207.244.91.139 1 1 38069 20230218021043
167.94.138.118 1 1 38069 20230223161617
167.248.133.184 1 1 38069 20230225011800
18.237.51.83 1 1 38069 20230225021623
103.176.152.38 1 1 38069 20230218021045
141.98.255.203 1 1 38069 20230228065527
191.101.217.17 1 1 38069 20230218021042
216.131.75.168 1 1 38069 20230218183951
139.144.150.23 1 1 38069 20230228054517
35.92.166.48 1 1 38069 20230221020858
35.87.143.177 1 1 38069 20230221021017
193.235.141.125 1 1 38069 20230221141546
47.88.94.161 1 1 38069 20230228175322
35.90.208.37 1 1 38069 20230225022027
35.92.103.186 1 1 38069 20230225022201
47.88.101.3 1 1 38069 20230228175322
130.211.54.158 1 1 38069 20230224113230
131.226.2.65 1 1 38069 20230225212941
64.145.93.229 1 1 38069 20230228020522
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 12
20230216 1 1 38069 1
20230218 7 7 266483 7
20230219 1 1 38069 1
20230220 5 14 1236745 2
20230221 12 68 3115235 5
20230222 1 1 38069 1
20230223 1 2 75564 1
20230224 2 2 76138 2
20230225 9 9 342621 9
20230226 2 2 76138 2
20230227 1 1 38069 1
20230228 20 69 3041334 14
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 45
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 9
/ 47 1789243 44 44
/pdf_phbcoop.php 4 172324 1 1
/vendor/fontawesome-free/webfonts/fa-regular-400.woff2 2 27104 0 0
/vendor/fontawesome-free/webfonts/fa-brands-400.woff2 2 149536 0 1
/vendor/fontawesome-free/webfonts/fa-solid-900.woff2 2 148512 0 0
/vendor/simple-line-icons/fonts/Simple-Line-Icons.woff2 2 60128 0 0
/phb_admin/uploads/teams/ 1 7427 0 0
/ourteam.php 1 47028 1 0
/index.php 1 38069 0 0
END_SIDER

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.1933 ]--