LittleDemon WebShell


Linux hosting5.siteguarding.com 3.10.0-962.3.2.lve1.5.88.el7.x86_64 #1 SMP Fri Sep 26 14:06:42 UTC 2025 x86_64
Path : /home/devsafetybis/tmp/awstats/
File Upload :
Command :
Current File : /home/devsafetybis/tmp/awstats/awstats012024.dr800.dev.safetybis.com.txt

AWSTATS DATA FILE 7.8 (build 20200416)
# If you remove this file, all statistics for date 202401 will be lost/reset.
# Last config file used to build this data file was /home/devsafetybis/tmp/awstats/awstats.dr800.dev.safetybis.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2024                
POS_TIME 2688                
POS_VISITOR 11739               
POS_DAY 14406               
POS_DOMAIN 3404                
POS_LOGIN 3741                
POS_ROBOT 3896                
POS_WORMS 4284                
POS_EMAILSENDER 4415                
POS_EMAILRECEIVER 4558                
POS_SESSION 15076               
POS_SIDER 15223               
POS_FILETYPES 4693                
POS_DOWNLOADS 4880                
POS_OS 4928                
POS_BROWSER 5228                
POS_SCREENSIZE 5851                
POS_UNKNOWNREFERER 5925                
POS_UNKNOWNREFERERBROWSER 6783                
POS_ORIGIN 7357                
POS_SEREFERRALS 7491                
POS_PAGEREFS 7635                
POS_SEARCHWORDS 7783                
POS_KEYWORDS 7935                
POS_MISC 2352                
POS_ERRORS 7994                
POS_CLUSTER 3597                
POS_SIDER_404 8121                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20240201014504 15 3064 9780799649375
FirstTime 0
LastTime 20240131174504
LastUpdate 20240201131550 15 0 14 0 0
TotalVisits 72                  
TotalUnique 65                  
MonthHostsKnown 0                   
MonthHostsUnknown 68                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
AddToFavourites 0 2 0
QuickTimeSupport 0 0 0
FlashSupport 0 0 0
RealPlayerSupport 0 0 0
PDFSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
JavascriptDisabled 0 0 0
JavaEnabled 0 0 0
TotalMisc 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 4 8 355414 1 3 36578
1 1 1 1171 4 7 125770
2 2 3 34179 5 5 66220
3 1 1 31397 3 9 65272
4 3 8 545317 2 4 64618
5 0 0 0 1 1 31312
6 8 8 3904 16 16 79549
7 2 3 33739 10 12 280946
8 4 5 49115 9 21 1416828
9 14 14 99990 8 10 107623
10 4 5 18888 2 3 30899
11 3 8 327532 5 10 173141
12 5 5 96975 5 5 156832
13 14 16 98586 3 13 102093
14 11 11 134670 14 15 373171
15 1 1 31397 1 1 31397
16 3 3 108706 4 5 125173
17 8 8 190727 36 37 1118868
18 4 4 4681 9 10 221167
19 6 6 128369 42 43 1247011
20 1 1 31284 3 3 93222
21 5 5 156985 20 20 619395
22 14 14 258646 50 50 1491668
23 1 1 1172 5 5 156194
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 9
us 72 78 310157
ca 15 15 441697
fr 12 12 376764
in 6 6 189149
de 4 4 139663
cn 4 18 1191008
ch 3 3 94191
nl 2 2 128
zz 1 1 87
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 7
feed 13 1285997 20240101112954 2
no_user_agent 10 285505 20240129075459 0
Go\-http\-client/ 9 41186 20240110061551 0
bot[\s_+:,\.\;\/\\-] 6 68202 20240128075739 4
curl 2 2340 20240117020539 0
unknown 2 2484 20240125045749 2
survey 1 31837 20240101175053 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 7
json 1 1171 0 0
svg 2 28404 0 0
js 15 1065711 0 0
Unknown 19 80775 0 0
css 3 3513 0 0
html 69 1533981 0 0
php 30 29289 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 16
linux 15 15
Unknown 36 36
macosx15 1 1
androidmarshmallow 1 1
win7 18 4
ios_ipad 2 1
androidlollipop 1 0
androidnougat 10 10
bsdfreebsd 1 1
winxp 2 2
macosx10 1 1
win10 46 43
win8.1 1 1
ios_iphone 2 1
androidpie 1 1
androidkitkat 1 1
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 28
chrome39.0.2171.95 1 1
safari13.1.2 1 0
Unknown 23 23
msie10.0 2 2
chrome100.0.4896.75 1 1
mozilla 13 13
android 1 1
chrome78.0.3904.108 3 3
chrome79.0.3945.79 2 1
netscape5.0 1 1
safari12.1.2 2 1
chrome71.0.2623.112 2 2
chrome63.0.3239.132 15 1
chrome74.0.3729.169 10 10
chrome114.0.0.0 12 12
chrome108.0.0.0 6 6
chrome89.0.4389.114 15 15
firefox95.0 9 9
safari13.1.1 1 1
chrome73.0.3683.90 1 0
chrome79.0.3945.136 1 1
chrome87.0.4280.88 1 0
chrome83.0.4103.61 1 1
firefox63.0 1 1
chrome52.0.3558.98 1 1
chrome60.0.3112.107 10 10
firefox77.0 1 1
chrome117.0.5938.132 2 1
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 9
python-requests/2.31.0 20240106144215
Mozilla/5.0_(compatible;_Let's_Encrypt_validation_server;__https://www.letsencrypt.org) 20240110061535
Mozilla/5.0_(l9scan/2.0.437313e2235323e22333e2231323;__https://leakix.net) 20240110061551
fasthttp 20240126121054
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20240129213921
domain_research_project_(_https://trentwil.es/domains.html) 20240110061709
Cpanel-HTTP-Client/1.0 20240110061226
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20240131111118
nook_browser/1.0 20240110134244
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 6
python-requests/2.31.0 20240106144215
nook_browser/1.0 20240110134244
Expanse,_a_Palo_Alto_Networks_company,_searches_across_the_global_IPv4_space_multiple_times_per_day_to_identify_customers'_presences_on_the_Internet._If_you_would_like_to_be_excluded_from_our_scans,_please_send_IP_addresses/domains_to:_scaninfo@paloaltonetworks.com 20240129213921
domain_research_project_(_https://trentwil.es/domains.html) 20240110061709
Cpanel-HTTP-Client/1.0 20240110061226
fasthttp 20240126121054
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 118 136
From1 0 0
From2 0 0
From3 0 0
From4 1 3
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
404 230 6435246
301 2 546
302 10 6540
403 12 44204
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 110
/wordpress/ 1 -
/wp-admin/images/xmrlpc.php 2 -
/site/wp-includes/wlwmanifest.xml 4 -
/lol.php 2 www.google.com
/2020/wp-includes/wlwmanifest.xml 4 -
/2018/wp-includes/wlwmanifest.xml 1 -
/wp-admin/css/colors/coffee/xmrlpc.php 2 -
/style.php 9 -
/wp.php 1 -
/cgi-bin/cgi-bin/about.php7 1 -
/wp-content/plugins/backup-backup/readme.txt 1 -
/media/system/js/core.js 1 -
/wp-includes/SimplePie/plugins.php 1 -
/wp-admin/xmrlpc.php 2 -
/wp-content/plugins/better-search-replace/assets/js/better-search-replace.js 1 -
/sito/wp-includes/wlwmanifest.xml 4 -
/wp-content/plugins/backup-backup/admin/css/bmi-plugin.min.css 1 -
/wp-content/plugins/backup-backup/includes/restore-batching.php 1 -
/xmlrpc.php 6 -
/gawean.PhP7 1 -
/worm0.PhP7 1 -
/.well-known/admin.php 1 -
/.well-known/pki-validation/xmrlpc.php 2 -
/wp-includes/ 1 -
/web/wp-includes/wlwmanifest.xml 6 -
/alfanew.php 1 -
/old/ 1 -
/news/wp-includes/wlwmanifest.xml 6 -
/wp-content/uploads/ 1 -
/wp-includes/js/jquery/jquery.js 2 -
/404.php 1 -
/wordpress/wp-includes/wlwmanifest.xml 6 -
/wp-content/plugins/ai-engine/app/chatbot.js 1 www.google.com
/wp-login.php 10 -
/wp-admin/user/xmrlpc.php 2 -
/cms/wp-includes/wlwmanifest.xml 4 -
/cmd.php 1 -
/.well-known/ 1 -
/wp/wp-includes/wlwmanifest.xml 6 -
/wp-admin/includes/wp-login.php 1 -
/wp-content/upgrade/ 1 -
/input.php 6 www.google.com
/wp-content/plugins/post-smtp/style/testEmail.html 1 -
/wp-includes/style.php 1 -
/wzy.php 6 www.google.com
/backup/wp-admin/setup-config.php 1 www.google.com
/plugin.php 1 -
/tmp/cmd.php 1 -
/inputs.php 1 www.google.com
/about.php 1 -
/cong.php 1 -
/README.md 1 -
/wp-admin/images/admin.php 1 -
/gawean.php 1 -
/wp-admin/core/install.php 2 -
/OLD/wp-admin/setup-config.php 1 www.google.com
/ws.php 1 -
/blog/ 1 -
/new/ 1 -
/wp-content/plugins/core/include.php 1 -
/wp-admin/css/colors/blue/xmrlpc.php 2 -
/test/wp-includes/wlwmanifest.xml 4 -
/wp-admin/network/index.php 1 -
/wp-admin/admin-ajax.php 1 -
/temp/ 1 -
/ioxi01.php 1 -
/.env 1 -
/general.php 3 www.google.com
/wp1/wp-includes/wlwmanifest.xml 4 -
/wp-content/style.php 1 -
/sample.php 1 www.google.com
/wp-admin/setup-config.php 1 www.google.com
/wp-content/plugins/pwnd/pwnd.php 1 www.google.com
/media/wp-includes/wlwmanifest.xml 1 -
/blog/wp-includes/wlwmanifest.xml 6 -
/wp-content/ 1 -
/wp-includes/js/jquery/jquery.min.js 4 www.google.com
/website/wp-includes/wlwmanifest.xml 6 -
/wp-content/plugins/ai-engine/app/index.js 2 -
/.well-knownold/ 1 -
/wordpress/wp-admin/setup-config.php 1 www.google.com
/wp-content/plugins/index.php 1 -
/shop/wp-includes/wlwmanifest.xml 5 -
/simple.php 5 www.google.com
/.aws/credentials 2 -
/wp/ 1 -
/c.php 1 -
/test/ 1 -
/wp-admin/ 1 -
/wp-admin/style.php 1 -
/wp-admin/network/xmrlpc.php 2 -
/shell.php 1 -
/wp-admin/cong.php 1 -
/batm.php 1 -
/wp-admin/js/widgets/xmrlpc.php 2 -
/wp/wp-admin/setup-config.php 1 www.google.com
/alfanew.PhP7 1 -
/uploads/cmd.php 1 -
/wp-config-sample.php 1 -
/wp-content/plugins/iloveyou/ilovejoana.php 1 www.google.com
/wp-includes/wlwmanifest.xml 6 -
/.well-known/about.php 1 -
/wp-content/pm.php 1 -
/wp-admin/includes/xmrlpc.php 2 -
/exec.php 1 -
/backup/ 1 -
/wp-admin/css/colors/xmrlpc.php 2 -
/old/wp-admin/setup-config.php 1 www.google.com
/2019/wp-includes/wlwmanifest.xml 5 -
/wp2/wp-includes/wlwmanifest.xml 4 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 68
45.80.158.199 10 10 0 20240130133448
144.126.131.29 10 10 11720 20240116144248
160.153.156.35 10 10 5860 20240105090906
163.5.169.26 6 6 188382 20240128194927
103.139.17.127 5 5 157865 20240126121054
163.5.64.69 3 3 94191 20240116175802
199.45.154.19 3 3 3513 20240131111118
193.222.96.114 3 3 94191 20240124214554
163.5.210.83 3 3 94191 20240131174504
183.136.225.45 3 12 865818 20240125045712
172.104.40.103 3 3 94191 20240124221147
5.182.87.46 2 2 76869 20240130163333
47.254.196.136 2 2 31336 20240107090439
134.122.89.242 2 2 2344 20240110061551
142.44.157.2 2 2 63234 20240124220916
212.32.252.174 2 2 128 20240110061226
205.169.39.232 2 3 16546 20240110100549
68.178.148.72 1 1 1171 20240112044707
199.45.155.35 1 1 1171 20240104100849
68.178.150.78 1 1 1171 20240122183954
199.45.154.50 1 1 1171 20240103111433
45.129.14.39 1 1 31284 20240129202118
205.210.31.178 1 1 31837 20240113162322
68.178.246.86 1 1 1171 20240122141714
198.235.24.39 1 1 31837 20240109143949
38.242.195.48 1 1 1171 20240130022107
35.88.21.138 1 1 87 20240110061535
18.217.140.116 1 1 87 20240110061535
205.210.31.144 1 1 31397 20240109145924
50.62.177.110 0 1 1171 
161.35.236.115 1 1 1172 20240122003450
205.210.31.250 1 1 31397 20240129213921
198.235.24.239 1 1 31837 20240117024759
72.167.225.69 0 2 2342 
15.204.227.40 1 1 1171 20240110061709
44.227.242.80 1 1 1171 20240126074832
148.72.74.49 1 1 1170 20240129220309
64.23.155.204 1 1 1171 20240112102057
104.197.209.149 1 1 1173 20240118001712
23.178.112.201 1 1 87 20240110061535
162.142.125.223 1 1 1173 20240125084300
199.168.100.242 1 1 1173 20240108173913
65.154.226.171 1 2 15374 20240110081044
198.235.24.163 1 1 31397 20240112095539
205.210.31.102 1 1 31397 20240120094856
159.65.51.3 1 1 31397 20240107043755
199.45.155.18 1 1 1171 20240102181510
199.45.155.32 1 1 1171 20240121013839
198.235.24.185 1 1 31397 20240117084925
97.74.91.90 1 1 1169 20240115181628
167.94.138.36 1 1 1171 20240126084326
148.72.232.106 1 1 1172 20240101174211
173.249.27.178 1 1 31397 20240118071210
68.178.223.59 0 1 1171 
15.188.77.42 1 1 31837 20240110134244
198.235.24.236 1 1 31837 20240120192518
199.188.201.66 1 1 1172 20240112121726
198.71.235.3 1 1 1170 20240107182120
157.230.184.211 1 1 1173 20240126135233
183.136.225.14 1 6 325190 20240118112816
198.71.225.5 1 1 1170 20240101191955
205.210.31.60 1 1 31397 20240103212256
85.215.155.77 1 1 31397 20240107035847
85.215.106.92 1 1 31397 20240106144215
164.90.161.132 1 1 1172 20240121124157
209.97.142.43 1 1 31837 20240111140255
205.210.31.95 1 1 31397 20240124154037
208.109.71.255 1 1 1172 20240115234006
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 29
20240101 2 2 2342 2
20240102 1 1 1171 1
20240103 2 2 32568 2
20240104 1 1 1171 1
20240105 10 11 7031 1
20240106 1 1 31397 1
20240107 8 8 159705 6
20240108 1 1 1173 1
20240109 2 2 63234 2
20240110 12 14 67661 9
20240111 1 1 31837 1
20240112 4 4 34911 4
20240113 1 1 31837 1
20240115 7 7 8201 3
20240116 8 8 100051 2
20240117 2 2 63234 2
20240118 5 14 710829 4
20240119 1 1 1171 1
20240120 2 2 63234 2
20240121 3 3 33740 3
20240122 3 4 4685 3
20240124 9 9 283013 4
20240125 2 7 513922 2
20240126 8 8 160940 5
20240127 0 2 2342 0
20240128 3 3 94191 1
20240129 3 3 63851 3
20240130 13 13 78040 3
20240131 4 4 95362 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 72
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 29
/ 69 1533981 50 49
/wp-login.php 9 10537 9 9
/.well-known/acme-challenge/ZUiEVQSTXMPgbrhB1qJC3_4E1qdD9oJz7MxS40Cg8KM 3 261 3 3
/css/xmrlpc.php 2 2344 0 0
/p0wny.php 2 1172 1 0
/xmrlpc.php 2 2344 2 0
/user/login 2 76869 1 1
/img/xmrlpc.php 2 2344 0 0
/images/xmrlpc.php 2 2344 0 2
/p.php 2 1172 0 0
/shell.php 2 1172 0 0
/wp-pano 2 2345 2 2
/cgi-bin/xmrlpc.php 2 2344 0 0
/powny.php 2 1172 0 0
/tmp/shell.php 2 1172 0 1
/main 1 0 0 0
/_all_dbs 1 1172 0 1
/bk 1 0 0 0
/wordpress 1 0 1 0
/bc 1 0 0 0
/.well-known/acme-challenge/SOVRYOI4_LHW2XU_Y3MAVLHX3-I1SRNV 1 64 0 1
/new 1 0 0 0
/.well-known/acme-challenge/JCWH3HMJ6_KBU0XP4RWVGA1VC-BRY5XS 1 64 1 0
/old 1 0 0 0
/sftp-config.json 1 1171 1 1
/style.php 1 1172 1 1
/home 1 0 0 1
/wp 1 0 0 0
/backup 1 0 0 0
END_SIDER

LittleDemon - FACEBOOK
[ KELUAR ]