shell bypass 403

UnknownSec Shell

: /home/bouloter/tmp/awstats/ssl/ [ drwx------ ]

name : awstats082025.monassureur.bouloter.com.txt
AWSTATS DATA FILE 7.9 (build 20230108)
# If you remove this file, all statistics for date 202508 will be lost/reset.
# Last config file used to build this data file was /home/bouloter/tmp/awstats/ssl/awstats.monassureur.bouloter.com.conf.

# Position (offset in bytes) in this file for beginning of each section for
# direct I/O access. If you made changes somewhere in this file, you should
# also remove completely the MAP section (AWStats will rewrite it at next
# update).
BEGIN_MAP 28
POS_GENERAL 2059                
POS_TIME 2717                
POS_VISITOR 7133                
POS_DAY 8519                
POS_DOMAIN 3309                
POS_LOGIN 3603                
POS_ROBOT 3758                
POS_WORMS 3992                
POS_EMAILSENDER 4123                
POS_EMAILRECEIVER 4266                
POS_SESSION 8938                
POS_FILESIZE 9162                
POS_SIDER 9085                
POS_FILETYPES 4401                
POS_DOWNLOADS 4482                
POS_OS 4530                
POS_BROWSER 4655                
POS_SCREENSIZE 4879                
POS_UNKNOWNREFERER 4953                
POS_UNKNOWNREFERERBROWSER 5383                
POS_ORIGIN 5621                
POS_SEREFERRALS 5753                
POS_PAGEREFS 5897                
POS_SEARCHWORDS 6045                
POS_KEYWORDS 6197                
POS_MISC 2381                
POS_ERRORS 6256                
POS_CLUSTER 3459                
POS_SIDER_404 6360                
END_MAP

# LastLine    = Date of last record processed - Last record line number in last log - Last record offset in last log - Last record signature value
# FirstTime   = Date of first visit for history file
# LastTime    = Date of last visit for history file
# LastUpdate  = Date of last update - Nb of parsed records - Nb of parsed old records - Nb of parsed new records - Nb of parsed corrupted - Nb of parsed dropped
# TotalVisits = Number of visits
# TotalUnique = Number of unique visitors
# MonthHostsKnown   = Number of hosts known
# MonthHostsUnKnown = Number of hosts unknown
BEGIN_GENERAL 8
LastLine 20250901100154 1 0 3624835834758
FirstTime 0
LastTime 20250830193417
LastUpdate 20250901203754 1 0 0 0 0
TotalVisits 36                  
TotalUnique 36                  
MonthHostsKnown 0                   
MonthHostsUnknown 36                  
END_GENERAL

# Misc ID - Pages - Hits - Bandwidth
BEGIN_MISC 10
FlashSupport 0 0 0
JavascriptDisabled 0 0 0
QuickTimeSupport 0 0 0
TotalMisc 0 0 0
JavaEnabled 0 0 0
AddToFavourites 0 0 0
RealPlayerSupport 0 0 0
WindowsMediaPlayerSupport 0 0 0
PDFSupport 0 0 0
DirectorSupport 0 0 0
END_MISC

# Hour - Pages - Hits - Bandwidth - Not viewed Pages - Not viewed Hits - Not viewed Bandwidth
BEGIN_TIME 24
0 1 1 37 9 16 17505
1 1 1 17 4 8 8760
2 1 1 37 3 7 7534
3 5 5 185 17 32 31296
4 2 2 54 0 4 3753
5 1 1 37 1 10 8794
6 2 2 74 3 19 18782
7 2 2 74 1 9 6255
8 1 1 37 1 7 6246
9 1 1 17 2 4 3761
10 3 3 71 4 14 13761
11 0 0 0 1 6 6292
12 1 1 37 0 3 1251
13 2 2 54 2 8 7534
14 0 0 0 1 3 3744
15 1 1 37 1 11 12501
16 1 1 37 15 17 21258
17 2 2 58 0 3 3753
18 3 3 111 18 25 26283
19 1 1 37 1 4 2493
20 1 1 21 3 5 5016
21 0 0 0 1 3 3744
22 2 2 74 1 4 2523
23 3 3 95 3 12 11241
END_TIME

# Domain - Pages - Hits - Bandwidth
# The 25 first Pages must be first (order not required for others)
BEGIN_DOMAIN 8
us 25 25 857
ca 3 3 51
be 2 2 74
bg 2 2 74
cn 2 2 34
ru 1 1 37
jp 1 1 37
au 1 1 37
END_DOMAIN

# Cluster ID - Pages - Hits - Bandwidth
BEGIN_CLUSTER 0
END_CLUSTER

# Login - Pages - Hits - Bandwidth - Last visit
# The 10 first Pages must be first (order not required for others)
BEGIN_LOGIN 0
END_LOGIN

# Robot ID - Hits - Bandwidth - Last visit - Hits on robots.txt
# The 25 first Hits must be first (order not required for others)
BEGIN_ROBOT 3
bot[\s_+:,\.\;\/\\-] 7 179 20250812052637 0
survey 2 34 20250811091626 0
scrapy 2 74 20250813131351 0
END_ROBOT

# Worm ID - Hits - Bandwidth - Last visit
# The 5 first Hits must be first (order not required for others)
BEGIN_WORMS 0
END_WORMS

# EMail - Hits - Bandwidth - Last visit
# The 20 first Hits must be first (order not required for others)
BEGIN_EMAILSENDER 0
END_EMAILSENDER

# EMail - Hits - Bandwidth - Last visit
# The 20 first hits must be first (order not required for others)
BEGIN_EMAILRECEIVER 0
END_EMAILRECEIVER

# Files type - Hits - Bandwidth - Bandwidth without compression - Bandwidth after compression
BEGIN_FILETYPES 1
html 37 1201 0 0
END_FILETYPES

# Downloads - Hits - Bandwidth
BEGIN_DOWNLOADS 0
END_DOWNLOADS

# OS ID - Hits
BEGIN_OS ID - Hits - Pages 5
macosx14 1 1
linux 8 8
Unknown 20 20
win10 4 4
macosx15 4 4
END_OS

# Browser ID - Hits - Pages
BEGIN_BROWSER 9
Unknown 4 4
chrome139.0.0.0 4 4
chrome120.0.0.0 2 2
chrome81.0.4044.129 3 3
chrome133.0.0.0 4 4
chrome136.0.0.0 2 2
chrome76.0.3809.132 1 1
chrome130.0.0.0 1 1
mozilla 16 16
END_BROWSER

# Screen size - Hits
BEGIN_SCREENSIZE 0
END_SCREENSIZE

# Unknown referer OS - Last visit date
BEGIN_UNKNOWNREFERER 3
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250823014306
Mozilla/5.0_(compatible;_CensysInspect/1.1;__https://about.censys.io/) 20250830193417
Mozilla/5.0_(compatible;_InternetMeasurement/1.0;__https://internet-measurement.com/) 20250807024259
END_UNKNOWNREFERER

# Unknown referer Browser - Last visit date
BEGIN_UNKNOWNREFERERBROWSER 1
Hello_from_Palo_Alto_Networks,_find_out_more_about_our_scans_in_https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity 20250823014306
END_UNKNOWNREFERERBROWSER

# Origin - Pages - Hits 
BEGIN_ORIGIN 6
From0 37 37
From1 0 0
From2 0 0
From3 0 0
From4 0 0
From5 0 0
END_ORIGIN

# Search engine referers ID - Pages - Hits
BEGIN_SEREFERRALS 0
END_SEREFERRALS

# External page referers - Pages - Hits
# The 25 first Pages must be first (order not required for others)
BEGIN_PAGEREFS 0
END_PAGEREFS

# Search keyphrases - Number of search
# The 10 first number of search must be first (order not required for others)
BEGIN_SEARCHWORDS 0
END_SEARCHWORDS

# Search keywords - Number of search
# The 25 first number of search must be first (order not required for others)
BEGIN_KEYWORDS 0
END_KEYWORDS

# Errors - Hits - Bandwidth
BEGIN_ERRORS 2
403 16 19872
404 171 213921
END_ERRORS

# URL with 404 errors - Hits - Last URL referrer
BEGIN_SIDER_404 28
/wiki 2 -
/webshell 2 -
/.env.prod 3 -
/_fragment 2 -
/shell.php 2 -
/.env.save 3 -
/phpinfo 3 -
/_profiler/phpinfo 3 -
/enhancecp 2 -
/sitemap.xml 3 -
/api/.env 3 -
/config.json 2 -
/.well-known/security.txt 4 -
/admin/.env 3 -
/shell 2 -
/.env 4 -
/application/.env 3 -
/dev/.env 3 -
/robots.txt 97 -
/login 2 -
/webshell.php 2 -
/phpinfo.php 3 -
/security.txt 5 -
/php_info.php 3 -
/backend/.env 3 -
/app_dev.php/_profiler/open 1 -
/info 3 -
/.env.example 3 -
END_SIDER_404

# Host - Pages - Hits - Bandwidth - Last visit date - [Start date of last visit] - [Last page of last visit]
# [Start date of last visit] and [Last page of last visit] are saved only if session is not finished
# The 25 first Hits must be first (order not required for others)
BEGIN_VISITOR 36
167.94.138.202 2 2 74 20250827185050
209.38.153.185 1 1 37 20250810152043
167.99.81.196 1 1 37 20250825042239
27.115.124.48 1 1 17 20250828103948
195.178.110.161 1 1 37 20250818181903
8.222.136.209 1 1 37 20250830063308
167.94.145.97 1 1 37 20250823083615
167.94.138.196 1 1 37 20250823074935
206.168.34.74 1 1 37 20250822034450
206.168.34.79 1 1 37 20250810034434
199.45.155.87 1 1 37 20250818233245
157.119.40.21 1 1 37 20250803225123
147.185.132.33 1 1 17 20250819090257
87.236.176.178 1 1 37 20250802225108
71.6.134.231 1 1 37 20250806232607
203.55.131.3 1 1 37 20250820032238
198.235.24.229 1 1 17 20250823014306
198.235.24.202 1 1 17 20250801135418
87.236.176.80 1 1 37 20250807024259
143.198.43.50 1 1 37 20250824103638
167.94.138.57 1 1 37 20250803125256
93.123.109.81 1 1 37 20250827165250
206.189.5.11 1 1 37 20250811135457
206.168.34.221 1 1 37 20250815033049
159.65.251.180 1 1 21 20250818235850
162.142.125.113 1 1 37 20250806004208
104.131.74.114 1 1 21 20250801205206
101.198.0.180 1 1 17 20250828105454
199.45.155.90 1 1 37 20250830193417
162.142.125.122 1 1 37 20250823072804
165.22.34.194 1 1 21 20250805171351
162.142.125.119 1 1 37 20250823053023
162.142.125.195 1 1 37 20250819061842
93.123.109.214 1 1 37 20250828030605
205.210.31.11 1 1 17 20250802042140
71.6.134.234 1 1 37 20250804175456
END_VISITOR

# Date - Pages - Hits - Bandwidth - Visits
BEGIN_DAY 20
20250801 2 2 38 2
20250802 2 2 54 2
20250803 2 2 74 2
20250804 1 1 37 1
20250805 1 1 21 1
20250806 2 2 74 2
20250807 1 1 37 1
20250810 2 2 74 2
20250811 1 1 37 1
20250815 1 1 37 1
20250818 3 3 95 3
20250819 2 2 54 2
20250820 1 1 37 1
20250822 1 1 37 1
20250823 5 5 165 5
20250824 1 1 37 1
20250825 1 1 37 1
20250827 3 3 111 2
20250828 3 3 71 3
20250830 2 2 74 2
END_DAY

# Session range - Number of visits
BEGIN_SESSION 1
0s-30s 36
END_SESSION

# URL - Pages - Bandwidth - Entry - Exit
# The 25 first Pages must be first (order not required for others)
BEGIN_SIDER 1
/ 37 1201 36 36
END_SIDER

# Payload Range - Payload Frequency
BEGIN_FILESIZE 2
0-44 48
1K-2K 223
END_FILESIZE

© 2025 UnknownSec
afwwrfwafr45458465
Password