!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64
 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/tmp/awstats/ssl/   drwx------
Free 237.2 GB of 981.82 GB (24.16%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     awstats032023.phbcoop.com.17507765-18-20171030205522.webstarterz.com.txt (12.77 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202303 will be lost/reset.
# Last config file used to build this data file was /home/cp949260/tmp/awstats/ssl/awstats.phbcoop.com.17507765-18-20171030205522.webstarterz.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2055                
POS_TIME 2736                
POS_VISITOR 10199               
POS_DAY 12042               
POS_DOMAIN 3476                
POS_LOGIN 3814                
POS_ROBOT 3969                
POS_WORMS 4497                
POS_EMAILSENDER 4628                
POS_EMAILRECEIVER 4771                
POS_SESSION 12412               
POS_SIDER 12571               
POS_FILETYPES 4906                
POS_DOWNLOADS 5132                
POS_OS 6032                
POS_BROWSER 6158                
POS_SCREENSIZE 6467                
POS_UNKNOWNREFERER 6541                
POS_UNKNOWNREFERERBROWSER 7162                
POS_ORIGIN 7529                
POS_SEREFERRALS 7664                
POS_PAGEREFS 7860                
POS_SEARCHWORDS 8008                
POS_KEYWORDS 8160                
POS_MISC 2400                
POS_ERRORS 8219                
POS_CLUSTER 3670                
POS_SIDER_404 8305                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230401022221 109 23766 9888787600803
FirstTime 20230317014635
LastTime 20230331145835
LastUpdate 20230401204304 109 0 108 0 0
TotalVisits 43                  
TotalUnique 42                  
MonthHostsKnown 0                   
MonthHostsUnknown 46                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
DirectorSupport 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
TotalMisc 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 0 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
JavascriptDisabled 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 37762 5 148 8139269
1 2 2 75524 19 204 9323909
2 9 9 339858 9 98 3680049
3 3 3 113286 45 127 3393056
4 1 1 37762 4 54 5305545
5 2 2 75524 3 14 772646
6 0 0 0 5 62 2721589
7 0 0 0 4 55 2952523
8 0 1 58443 1 63 9090674
9 1 2 90179 5 64 2899517
10 10 71 2175593 12 126 5397326
11 5 37 750991 24 83 3162946
12 0 0 0 11 22 4700884
13 1 1 37762 4 10 222241
14 21 115 5346739 12 24 194646
15 2 3 119316 6 61 10483392
16 0 0 0 11 17 215238
17 0 0 0 8 8 113286
18 3 3 113286 51 103 2803317
19 1 1 37762 13 62 2980052
20 0 0 0 0 2 261166
21 4 4 151048 10 66 2787277
22 2 2 75524 10 15 5590167
23 0 0 0 11 113 5271176
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
th 29 219 8163641
us 19 19 717478
se 6 6 226572
ca 6 6 226572
in 2 2 75524
be 2 2 75524
fr 2 2 75524
de 1 1 37762
ru 1 1 37762
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 10
AhrefsBot/ 648 33218358 20230331233340 0
bingbot/ 393 27924363 20230331214416 0
Applebot/ 206 9577062 20230331094324 0
bingpreview 39 1777417 20230326030504 0
facebookexternalhit/ 11 420998 20230331110954 0
YandexBot/ 8 19128311 20230330235245 0
no_user_agent 8 302096 20230328073339 0
Go\-http\-client/ 1 37762 20230331223048 0
Googlebot/ 1 37762 20230322174834 0
curl 1 37762 20230327093522 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 9
pdf 2 2229692 0 0
gif 1 1737 0 0
jpg 136 2855980 0 0
php 20 672686 0 0
css 19 1224948 0 0
html 44 1509853 0 0
woff2 4 192640 0 0
js 26 894649 0 0
png 6 54174 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 14
/phb_admin/docs/doc_136310967320220427_143907.pdf 2 0 10132982
/phb_admin/docs/doc_27822842720220427_143534.pdf 1 0 396695
/phb_admin/docs/doc_146067044820220427_143708.pdf 1 0 8009154
/phb_admin/docs/doc_175975889320220420_131905.pdf 1 0 717112
/phb_admin/docs/doc_95249867920220427_143407.pdf 1 0 444228
/phb_admin/docs/doc_196988966020220427_135946.pdf 1 0 1832997
/phb_admin/docs/doc_213925987220220418_111216.pdf 1 0 54744
/phb_admin/docs/doc_80625785120220420_090829.pdf 1 0 393499
/phb_admin/docs/doc_96883288720220519_090515.pdf 1 0 3020375
/phb_admin/docs/doc_65348249020220928_115644.pdf 1 0 2796637
/phb_admin/docs/doc_44820941420220427_145343.pdf 1 0 1465262
/phb_admin/docs/doc_149806899120220429_091048.pdf 1 0 105648
/phb_admin/docs/doc_150845799120220418_110948.pdf 1 0 26680
/phb_admin/docs/doc_81057428520220419_101942.pdf 1 0 33671
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
win7 2 2
macosx10 3 3
Unknown 15 15
win10 228 38
linux 10 10
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 13
chrome111.0.0.0 219 29
netscape5.0 1 1
chrome108.0.0.0 1 1
chrome28.0.1468.0 1 1
chrome45.0.2454.85 1 1
Unknown 6 6
safari5.0.3 1 1
chrome105.0.0.0 6 6
mozilla 8 8
chrome86.0.4240.111 2 2
chrome39.0.2171.95 2 2
chrome81.0.4044.129 3 3
chrome83.0.4103.97 7 7
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 4
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230329132707
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230325151155
Mozilla/5.0_researchscan.comsys.rwth-aachen.de 20230323220913
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230324000813
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230329132707
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 44 44
From1 0 0
From2 0 5
From3 0 0
From4 24 209
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 2
images_search_yahoo_catchall 0 1
www_google_com 0 4
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 1
404 255 0
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 67
/img/blog/wide/blog-11.jpg 2 -
/vendor/.env 2 -
/src/.env 2 -
/shop/.env 2 -
/project/.env 2 -
/cgi-bin/.env 2 -
/base/.env 2 -
/wp-includes/class-wordpress-license.php 5 -
/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 2 -
/protected/.env 2 -
/api/.env 3 -
/xmlrpc.php 2 -
/local/.env 2 -
/wp-content/plugins/wp-file-upload/ROOBOTS.php 7 www.google.com
/1.sql 1 -
/wp-content/wso112233.php 3 www.google.com
/app/config/.env 2 -
/dev/.env 2 -
/library/.env 2 -
/wp-includes/class-wp-page-icon.php 5 -
/wp-includes/class-index-wordpress.php 5 -
/webmaster 1 -
/old/.env 2 -
/production/.env 2 -
/app/.env 2 -
/wp-content/.env 2 -
/new/.env 2 -
/database/.env 2 -
/wp-content/shell20211028.php 3 www.google.com
/wp-content/plugins/sid/sidwso.php 3 www.google.com
/audio/.env 2 -
/laravel/.env 4 -
/assets/.env 2 -
/sites/all/libraries/mailchimp/.env 2 -
/apps/.env 2 -
/phbcoop.com/.env 2 -
/xleet-shell.php 3 www.google.com
/broken.mp3 8 -
/.env.example 2 -
/.env 7 -
/wp-admin/.env 2 -
/wp-class.php 3 www.google.com
/www.sql 1 -
/mysql.sql 1 -
/upl.php 1 -
/yuuki 1 -
/blog/.env 4 -
/crm/.env 2 -
/dashboard/.env 2 -
/core/.env 2 -
/robots.txt 63 -
/public/.env 2 -
/img/logo_icon.png 11 -
/www/.env 2 -
/wp-admin/js/widgets/wp-login.php 5 -
/admin/.env 2 -
/portal/.env 2 -
/wp-includes/wp-system-cloud.php 5 -
/phb_admin/uploadphoto/Thumbnails/thumbnails_20-12-2022_02_50_02.pdf 16 -
/admin 1 -
/test/.env 2 -
/wp-content/plugins/TOPXOH/wDR.php 7 www.google.com
/docs/.env 2 -
/_profiler/phpinfo 2 -
/stalker_portal/screenshots/1/13.jpg 1 -
/conf/.env 2 -
/wp-admin/x.php 1 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 46
61.7.141.236 18 112 5233453 20230331145835
223.207.217.68 3 4 132847 20230328103635
223.207.240.64 3 34 1914944 20230321102638
223.207.241.58 3 33 488664 20230327110543
193.56.29.188 2 2 75524 20230324033038
18.191.0.106 2 2 75524 20230330112631
223.207.241.47 2 31 52278 20230329101345
193.235.141.127 1 1 37762 20230325022311
195.201.95.15 1 1 37762 20230324040637
198.235.24.43 1 1 37762 20230321091344
167.248.133.49 1 1 37762 20230324000813
162.142.125.225 1 1 37762 20230322032128
103.187.4.156 1 1 37762 20230321105326
54.212.195.137 1 1 37762 20230327020853
205.210.31.46 1 1 37762 20230317215813
198.235.24.41 1 1 37762 20230317213241
34.219.195.9 1 1 37762 20230317024910
167.94.138.35 1 1 37762 20230321052706
45.77.218.197 1 1 37762 20230326144726
172.173.186.115 1 1 37762 20230322184620
137.226.113.44 1 1 37762 20230323220913
193.235.141.135 1 1 37762 20230322101055
193.235.141.60 1 1 37762 20230319185758
193.235.141.145 1 1 37762 20230327194508
167.248.133.184 1 1 37762 20230318143507
35.86.172.10 1 1 37762 20230325022638
167.248.133.52 1 1 37762 20230321215348
208.115.216.234 1 1 37762 20230319222823
34.213.127.248 1 1 37762 20230317024829
167.94.138.125 1 1 37762 20230321213702
1.2.170.70 0 2 186803 
61.7.141.146 0 1 43792 
159.223.86.236 1 1 37762 20230322012523
87.236.176.233 1 1 37762 20230317014635
1.4.195.71 0 1 58443 
35.93.96.187 1 1 37762 20230325022557
198.235.24.55 1 1 37762 20230318030644
34.209.139.228 1 1 37762 20230329022206
45.131.194.65 1 1 37762 20230329055434
87.236.176.32 1 1 37762 20230325151155
52.88.20.96 1 1 37762 20230327020931
193.235.141.158 1 1 37762 20230317023004
180.222.155.34 0 1 52417 
193.235.141.17 1 1 37762 20230330155520
205.210.31.38 1 1 37762 20230325143756
198.235.24.185 1 1 37762 20230329132707
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 14
20230317 6 6 226572 6
20230318 2 2 75524 2
20230319 2 4 262327 2
20230321 8 39 2103754 6
20230322 4 5 203465 4
20230323 2 2 75524 2
20230324 3 3 113286 3
20230325 5 5 188810 5
20230326 1 1 37762 1
20230327 6 37 645742 4
20230328 3 4 132847 1
20230329 5 34 165564 4
20230330 3 3 113286 2
20230331 18 113 5291896 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 2
0s-30s 42
15mn-30mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 12
/ 39 1472718 38 38
/ourteam.php 6 269106 4 0
/article.php 6 140465 0 1
/phb_admin/uploads/teams/ 5 37135 0 1
/index.php 3 113286 0 0
/pdf_phbcoop.php 3 109051 1 2
/vendor/simple-line-icons/fonts/Simple-Line-Icons.woff2 1 30064 0 0
/pdf_year.php 1 22955 0 0
/vendor/fontawesome-free/webfonts/fa-solid-900.woff2 1 74256 0 0
/vendor/fontawesome-free/webfonts/fa-brands-400.woff2 1 74768 0 0
/vendor/fontawesome-free/webfonts/fa-regular-400.woff2 1 13552 0 0
/contact.php 1 17823 0 1
END_SIDER

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.1217 ]--