F3RGUSO WEBSHELL 403

Edit file

File name : awstats052025.taxigalle.sublime.lk.txt

Content :

AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202505 will be lost/reset.
# Last config file used to build this data file was /home/islapiiu/tmp/awstats/awstats.taxigalle.sublime.lk.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2051                
POS_TIME 2720                
POS_VISITOR 9335                
POS_DAY 11662               
POS_DOMAIN 3528                
POS_LOGIN 3973                
POS_ROBOT 4128                
POS_WORMS 4619                
POS_EMAILSENDER 4750                
POS_EMAILRECEIVER 4893                
POS_SESSION 12048               
POS_FILESIZE 13648               
POS_SIDER 12238               
POS_FILETYPES 5028                
POS_DOWNLOADS 5178                
POS_OS 5226                
POS_BROWSER 5439                
POS_SCREENSIZE 6021                
POS_UNKNOWNREFERER 6095                
POS_UNKNOWNREFERERBROWSER 6399                
POS_ORIGIN 6511                
POS_SEREFERRALS 6645                
POS_PAGEREFS 6789                
POS_SEARCHWORDS 6937                
POS_KEYWORDS 7089                
POS_MISC 2383                
POS_ERRORS 7148                
POS_CLUSTER 3829                
POS_SIDER_404 7282                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250601000118 518 66458 7491821165480
FirstTime 0
LastTime 20250531022537
LastUpdate 20250601084257 518 0 517 0 0
TotalVisits 63                  
TotalUnique 58                  
MonthHostsKnown 0                   
MonthHostsUnknown 59                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
JavaEnabled 0 0 0
JavascriptDisabled 0 0 0
RealPlayerSupport 0 0 0
FlashSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
DirectorSupport 0 0 0
PDFSupport 0 0 0
AddToFavourites 0 14 0
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 0 0 0 246 298 420783
1 3 3 8875 2693 2738 2123797
2 3 3 10792 506 550 424641
3 2 2 8470 80 128 98784
4 1 1 4235 1688 1742 1358488
5 4 4 13670 232 297 242788
6 3 3 9435 152 199 162248
7 2 2 6553 534 587 454488
8 5 5 21175 378 1370 1057514
9 7 7 23493 2150 2202 1739666
10 3 3 8875 687 741 571782
11 1 1 7620 773 815 628860
12 4 4 16940 153 192 291861
13 3 3 10792 2286 2348 1839190
14 4 4 13110 4389 4441 3444242
15 3 3 12371 2235 2277 1721827
16 14 14 8875 767 844 643785
17 22 22 153250 121 168 98712
18 1 1 4235 114 158 115798
19 12 12 8470 222 241 178125
20 5 5 21175 213 238 121818
21 3 3 10788 2368 2397 1869876
22 3 4 159712 450 2115 1635972
23 7 7 25815 3521 3571 2783221
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 18
us 44 44 91324
ro 22 22 153250
jp 13 13 55055
cn 11 11 42350
gb 6 6 15837
eu 4 4 13106
in 2 2 4640
nl 2 2 6553
de 2 2 1930
cl 2 2 8470
ng 1 1 4235
ua 1 1 7620
be 1 1 4235
fi 1 1 7620
pk 1 1 2322
lt 1 1 2322
bg 1 1 4235
il 0 1 143622
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 10
no_user_agent 51 375698 20250529005032 0
YandexBot/ 8 13854 20250517094627 7
BLEXBot/ 5 16971 20250528054515 1
MJ12bot/ 3 11703 20250529040932 0
DotBot/ 3 22860 20250529062326 0
facebookexternalhit/ 3 22860 20250529011812 0
Googlebot/ 2 7802 20250528151911 0
AhrefsBot/ 2 7802 20250529011645 0
Barkrowler 2 8470 20250522083622 0
nbot 1 4235 20250527130338 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 5
html 18 36728 0 0
jpg 1 143622 0 0
php 1 7620 0 0
xml 17 121920 0 0
cgi 79 258836 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 11
Unknown 6 6
ios_iphone 25 25
win7 2 2
macosx11 1 0
macosx6 1 1
linux 5 5
win10 51 51
androidnougat 10 10
macosx10 5 5
linuxubuntu 1 1
macosx15 9 9
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 25
chrome56.0.2924.87 1 0
chrome135.0.0.0 2 2
chrome74.0.3729.157 1 1
chrome96.0.4664.110 1 1
chrome91.0.4472.114 1 1
safari5.1 1 1
mozilla 4 4
chrome60.0.3112.107 10 10
chrome126.0.0.0 1 1
chrome79.0.3945.130 1 1
chrome80.0.3987.149 1 1
firefox77.0 6 6
chrome79.0.3945.79 2 2
chrome84.0.4147.105 2 2
chrome135.0.7049.115 1 1
chrome74.0.3729.169 20 20
chrome114.0.0.0 1 1
Unknown 2 2
chrome104.0.0.0 1 1
opera70.0.3728.95 2 2
chrome58.0.3029.110 1 1
chrome39.0.2171.95 5 5
chrome78.0.3904.108 20 20
safari13.0.3 25 25
firefox79.0 4 4
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250529062831
ALittle_Client 20250528115349
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250527234453
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
ALittle_Client 20250528115349
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 54 55
From1 6 6
From2 0 0
From3 0 0
From4 55 55
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 4
403 6 7452
301 21 16695
302 30215 23100702
404 320 400320
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 40
/.well-known/pki-validation/top.php 1 -
/.well-known/pki-validation/wp-sigunq.php 9 -
/.well-known/pki-validation/flower.php 9 -
/.well-known/pki-validation/wp-admin/ 1 -
/.well-known/pki-validation/wp-login.php 9 -
/.well-known/pki-validation/moon.php 11 -
/.well-known/pki-validation/plugins.php 11 -
/.well-known/pki-validation/mariju.php 9 -
/.well-known/pki-validation/wp-scripts.php 2 -
/.well-known/pki-validation/class.api.php 9 -
/.well-known/pki-validation/Newsupway.php 2 -
/.well-known/pki-validation/classwithtostring.php 9 -
/.well-known/pki-validation/doc.php 9 -
/.well-known/pki-validation/cloud.php 11 -
/.well-known/pki-validation/iR7SzrsOUEP.php 9 -
/.well-known/pki-validation/amaxx.php 2 -
/.well-known/pki-validation/webdb.php 9 -
/.well-known/pki-validation/sxx.php 9 -
/.well-known/pki-validation/index.php 10 -
/.well-known/pki-validation/ssl.php 11 -
/.well-known/pki-validation/gkiliuew.php 2 -
/.well-known/pki-validation/baja.php 9 -
/.well-known/pki-validation/shell.php 9 -
/.well-known/pki-validation/eew.php 11 -
/.well-known/pki-validation/wp-conf.php 9 -
/.well-known/pki-validation/install.php 9 -
/.well-known/pki-validation/sx.php 1 -
/.well-known/pki-validation/2index.php 9 -
/.well-known/pki-validation/admin.php 9 -
/.well-known/pki-validation/.qiodetme.php 10 -
/.well-known/pki-validation/file.php 10 -
/.well-known/pki-validation/about.php 11 -
/.well-known/pki-validation/radio.php 9 -
/.well-known/pki-validation/scripts.php 9 -
/.well-known/pki-validation/lang-load-role.php 2 -
/.well-known/pki-validation/index1.php 9 -
/.well-known/pki-validation/wrapper.php 9 -
/.well-known/pki-validation/web.php 9 -
/.well-known/pki-validation/atomlib.php 9 -
/.well-known/pki-validation/xmrlpc.php 13 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 59
35.227.44.131 20 20 0 20250528164210
85.204.70.116 20 20 144780 20250527175236
58.49.233.126 3 3 12705 20250528222737
134.209.188.120 3 3 12705 20250528080821
207.180.255.40 3 3 12705 20250527201525
199.45.155.75 3 3 12705 20250527234459
194.33.45.123 2 2 4640 20250504015616
34.56.176.95 2 2 8470 20250528092953
157.230.229.15 2 2 8470 20250529055654
84.239.43.187 2 2 8470 20250528181916
138.199.29.228 2 2 4636 20250514145101
23.27.110.38 2 2 4640 20250503160321
34.148.163.157 2 2 8470 20250527132939
45.128.38.148 2 2 4640 20250508105858
138.199.18.145 2 2 8470 20250528094608
213.136.76.172 2 2 1930 20250517052650
191.96.227.24 2 2 8470 20250528213715
43.157.147.3 1 1 4235 20250527152327
87.236.176.100 1 1 4235 20250529062831
43.134.141.244 1 1 4235 20250528224711
113.203.221.25 1 1 2322 20250521141202
36.111.67.189 1 1 4235 20250527172742
23.239.27.53 1 1 3901 20250527151634
109.199.118.129 1 1 4235 20250527122636
43.135.186.135 1 1 4235 20250528125157
217.9.247.70 1 1 2322 20250531022537
194.104.11.157 1 1 4235 20250528155223
117.62.235.53 1 1 4235 20250527235145
43.153.36.110 1 1 4235 20250528020810
43.135.182.43 1 1 4235 20250528084207
43.156.228.27 1 1 4235 20250527234937
43.157.38.131 1 1 4235 20250528071208
43.130.102.223 1 1 4235 20250528205048
182.42.111.156 1 1 4235 20250528125754
41.216.188.14 1 1 4235 20250529023718
45.82.78.254 1 1 0 20250519162330
195.20.18.145 1 1 7620 20250527225820
62.197.158.45 1 1 2318 20250515214123
146.70.186.182 1 1 2322 20250505133058
162.14.197.180 1 1 4235 20250529045638
82.80.249.223 0 1 143622 
132.232.144.200 1 1 4235 20250529014650
106.119.167.146 1 1 4235 20250528160628
43.135.130.202 1 1 4235 20250529033028
43.135.144.81 1 1 4235 20250528145717
194.145.227.125 1 1 7620 20250528115349
64.225.49.116 1 1 4235 20250528141401
178.239.163.120 1 1 2322 20250508231111
44.222.151.168 1 1 4235 20250529030723
20.169.47.65 1 1 4235 20250527194613
43.166.134.47 1 1 4235 20250527083104
111.172.249.49 1 1 4235 20250528062122
182.44.2.148 1 1 4235 20250527203459
43.166.1.243 1 1 4235 20250527121213
149.36.48.69 1 1 2318 20250507092646
43.153.85.46 1 1 4235 20250529051335
146.70.186.174 1 1 2318 20250523075300
118.195.165.218 1 1 4235 20250527105957
123.160.223.73 1 1 0 20250528092045
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 16
20250503 2 2 4640 1
20250504 2 2 4640 1
20250505 2 2 3287 2
20250507 1 1 2318 1
20250508 4 4 9280 3
20250513 0 1 143622 0
20250514 1 1 2318 1
20250515 1 1 2318 1
20250517 1 1 965 1
20250519 1 1 0 1
20250521 1 1 2322 1
20250523 1 1 2318 1
20250527 50 50 232531 17
20250528 38 38 117730 23
20250529 9 9 38115 8
20250531 1 1 2322 1
END_DAY

# Session range - Number of visits
BEGIN_SESSION 5
15mn-30mn 1
5mn-15mn 1
2mn-5mn 2
0s-30s 58
30s-2mn 1
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 21
/cgi-sys/suspendedpage.cgi 79 258836 48 47
/.well-known/pki-validation/ 17 36728 14 14
/cgi-sys/suspendedpage.cgi/cms/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/xmlrpc.php 1 7620 0 0
/cgi-sys/suspendedpage.cgi/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/sito/wp-includes/wlwmanifest.xml 1 7620 0 1
/cgi-sys/suspendedpage.cgi/news/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/wordpress/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/blog/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/2018/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/media/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/web/wp-includes/wlwmanifest.xml 1 0 0 0
/cgi-sys/suspendedpage.cgi/2019/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/site/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/wp1/wp-includes/wlwmanifest.xml 1 7620 0 0
/ 1 0 1 1
/cgi-sys/suspendedpage.cgi/wp2/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/test/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/wp/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/shop/wp-includes/wlwmanifest.xml 1 7620 0 0
/cgi-sys/suspendedpage.cgi/website/wp-includes/wlwmanifest.xml 1 7620 0 0
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 5
1K-2K 327
2K-5K 84
500-1K 29999
0-44 285
5K+ 78
END_FILESIZE

F3RGUSO WEBSHELL COUNTER 403

Edit file